You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/automation/run-playbooks.md
+13-13Lines changed: 13 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -153,7 +153,7 @@ Beginning **June 2023**, you can no longer add playbooks to analytics rules in t
153
153
154
154
## Run a playbook manually, on demand
155
155
156
-
You can also manually run a playbook on demand, whether in response to alerts, incidents (in preview), or entities (also in preview). This can be useful in situations where you want more human input into and control over orchestration and response processes.
156
+
You can also manually run a playbook on demand, whether in response to alerts, incidents, or entities. This can be useful in situations where you want more human input into and control over orchestration and response processes.
157
157
158
158
### Run a playbook manually on an alert
159
159
@@ -187,7 +187,7 @@ In the Azure portal, select one of the following tabs as needed for your environ
187
187
188
188
You can see the run history for playbooks on an alert by selecting the **Runs** tab on the **Alert playbooks** pane. It might take a few seconds for any just-completed run to appear in the list. Selecting a specific run opens the full run log in Logic Apps.
189
189
190
-
### Run a playbook manually on an incident (preview)
190
+
### Run a playbook manually on an incident
191
191
192
192
This procedure differs, depending on if you're working in Microsoft Sentinel or in the unified security operations platform. Select the relevant tab for your environment:
193
193
@@ -196,7 +196,7 @@ This procedure differs, depending on if you're working in Microsoft Sentinel or
196
196
197
197
1. In the **Incidents** page, select an incident.
198
198
199
-
1. From the incident details pane that appears on the side, select **Actions > Run playbook (Preview)**.
199
+
1. From the incident details pane that appears on the side, select **Actions > Run playbook**.
200
200
201
201
Selecting the three dots at the end of the incident's line on the grid or right-clicking the incident displays the same list as the **Action** button.
202
202
@@ -216,7 +216,7 @@ This procedure differs, depending on if you're working in Microsoft Sentinel or
216
216
217
217
1. In the **Incidents** page, select an incident.
218
218
219
-
1. From the incident details pane that appears on the side, select **Run Playbook (Preview)**.
219
+
1. From the incident details pane that appears on the side, select **Run Playbook**.
220
220
221
221
1. The **Run playbook on incident** panel opens on the side, with all related playbooks for the selected incident. In the **Action** column, select **Run playbook** for the playbook you want to run immediately.
222
222
@@ -231,7 +231,7 @@ The **Actions** column might also show one of the following statuses:
231
231
232
232
View the run history for playbooks on an incident by selecting the **Runs** tab on the **Run playbook on incident** panel. It might take a few seconds for any just-completed run to appear in the list. Selecting a specific run opens the full run log in Logic Apps.
233
233
234
-
### Run a playbook manually on an entity (preview)
234
+
### Run a playbook manually on an entity
235
235
236
236
This procedure isn't supported in the unified security operations platform.
237
237
@@ -243,11 +243,11 @@ Select an entity in one of the following ways, depending on your originating con
243
243
244
244
In the **Entities** widget in the **Overview** tab, locate your entity, and do one of the following:
245
245
246
-
- Don't select the entity. Instead, select the three dots to the right of the entity, and then select **Run playbook (Preview)**. Locate the playbook you want to run, and select **Run** in that playbook's row.
246
+
- Don't select the entity. Instead, select the three dots to the right of the entity, and then select **Run playbook**. Locate the playbook you want to run, and select **Run** in that playbook's row.
247
247
248
248
- Select the entity to open the **Entities tab** of the incident details page. Locate your entity on the list, and select the three dots to the right. Locate the playbook you want to run, and select **Run** in that playbook's row.
249
249
250
-
- Select an entity and drill down to the entity details page. Then, select the **Run playbook (Preview)** button in the left-hand panel. Locate the playbook you want to run, and select **Run** in that playbook's row.
250
+
- Select an entity and drill down to the entity details page. Then, select the **Run playbook** button in the left-hand panel. Locate the playbook you want to run, and select **Run** in that playbook's row.
0 commit comments