Jobs run playbooks and are either time-triggered (run at specific times) or event triggered (run when there are changes to a feed).
A job is an automated playbook task or set of playbook tasks that are scheduled to run at predefined intervals or under specific conditions. Jobs can be used for data enrichment, periodic reporting, threat intelligence gathering, or any repetitive operational tasks that need to be performed regularly without manual intervention. There are two types of jobs:
Time triggered jobs that run at specific times: For example, you can schedule a time triggered job that runs nightly and removes expired indicators.
Jobs triggered by a delta or change in a feed: For example, you can define an event triggered job to run a playbook when a specified TIM feed finishes a fetch operation for new indicators.
On the Jobs page, you can:
Action | Details |
|---|---|
Create a new job | Click + New Job. |
Edit an existing job | In the table, select a job and click Edit. |
Perform additional job management | In the table, select a job and click one of the following:
|
View job status | The chart panel at the top of the Jobs page shows various status buttons. Click one of the following buttons to filter the list of jobs for that status:
You can hide this panel by clicking Hide Chart Panel. |
Search for a specific job | Enter a search query in the filter field. You can also save a filter. |
View job details in the table | By default, the displayed table columns are:
Click
|
