Troubleshoot Active Response - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide
Product
Cortex XPANSE
Version
2
Creation date
2024-03-28
Last date published
2024-04-17
Category
User Guide
Solution
Cloud

To fix a playbook error for an alert, restart the playbook.

Caution

When you restart the playbook, any data collected by the previous playbook execution may be lost.

  1. On the Incident Response → Incidents page, select the incident that has an alert with a playbook error.

  2. In the details pane, select the Overview tab .

  3. Scroll to the alert with the alert with the playbook error, and click Restart Playbook.

If restarting the playbook does not fix the error, reach out to a member of the Customer Success Team.