Configuring and Enabling a Playbook
By default, SecMaster provides playbooks such as Fetching indicator from alert, Synchronization of HSS alert status, and Automatic closing of repeated alerts. The initial version (V1) of the playbooks has been activated. You only need to enable them.
If you need to edit a playbook, you can copy the initial version and edit it.
This section describes how to configure and enable a playbook.
Enabling a Playbook of the Initial Version
- Log in to the management console.
- Click
in the upper left corner of the page and choose Security & Compliance > SecMaster.
- In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
Figure 1 Workspace management page
- In the left navigation pane, choose Security Orchestration > Playbooks.
Figure 2 Accessing the Playbooks tab
- In the Operation column of the target playbook, click Enable.
- Select the playbook version to be enabled and click OK.
Enabling a Playbook of a Custom Version
Accessing the Playbook Version Management Page
- Log in to the management console.
- Click
in the upper left corner of the page and choose Security & Compliance > SecMaster.
- In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
Figure 3 Workspace management page
- In the left navigation pane, choose Security Orchestration > Playbooks.
Figure 4 Accessing the Playbooks tab
Copying a Playbook Version
- In the Operation column of the target playbook, click Versions.
Figure 5 Version Management slide-out panel
- On the Version Management slide-out panel, in the Version Information area, locate the row containing the desired playbook version, and click Clone in the Operation column.
- In the displayed dialog box, click OK.
Editing and Submitting a Playbook Version
- On the Version Management slide-out panel, in the Version Information area, locate the row containing the desired playbook version, and click Edit in the Operation column.
- On the page for editing a playbook version, edit the version information.
- Click OK.
Reviewing a Playbook Version
- After the playbook version is edited and submitted, the playbook management page is displayed. On the Playbooks page, click Version Management in the Operation column of the target playbook.
Figure 6 Version Management slide-out panel
- On the Version Management slide-out panel, click Review in the Operation column of the target playbook.
- In the displayed dialog box, set Comment to Passed and click OK.
Enabling a Playbook
- On the Version Management slide-out panel, click Enable in the Operation column of the target playbook.
- In the slide-out panel, select the playbook version you want to enable and click OK.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.