Subplaybook execution count

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Subplaybook execution count

L2 Linker

Hi!

 

Is there a way to count how many times was the specific subplaybook executed across mutliple/all incidents? How to ensure the number includes loops in subplaybooks?

The reason I need this number is to better understand ROI of the platform.

 

Thanks

Curious Fellow
1 ACCEPTED SOLUTION

Accepted Solutions

L2 Linker

Hey @Antanas,

 

You can create a widget where the data source is "SOAR Metrics", and query on that playbook.

In the following example, I'm checking how many times were any playbooks that contain the word "Phishing" in their name were executed in the past month:

nkazinets_2-1671535224896.png

 

nkazinets_1-1671535151681.png

 

 

Each time a playbook loops it's considered as an execution (so looping 5 times in an incident will add 5 to the execution count).

View solution in original post

1 REPLY 1

L2 Linker

Hey @Antanas,

 

You can create a widget where the data source is "SOAR Metrics", and query on that playbook.

In the following example, I'm checking how many times were any playbooks that contain the word "Phishing" in their name were executed in the past month:

nkazinets_2-1671535224896.png

 

nkazinets_1-1671535151681.png

 

 

Each time a playbook loops it's considered as an execution (so looping 5 times in an incident will add 5 to the execution count).

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!