Manage playbook content - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation
Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-10-10
Category
Administrator Guide
Abstract

Manage playbook content by either using a remote repository, or by saving versions of your playbook.

Save versions of your playbook in Cortex XSIAM

You can save versions of a playbook as you are developing it. When you save a version of a playbook, add a meaningful comment so that you will be able to recognize the changes you made in that version at a later time. The version is saved with the name of the playbook, your commit message, an indication of what the change was (modify, insert), the date the playbook was saved, and the name of the author who last saved it. If necessary, you can access the playbook’s version history and revert your playbook to a previous version.

  1. In a playbook, after making changes, click the list next to Save Playbook and then click Save version for current Playbook.

    playbook-save.png

  2. Enter a description of the change that was made to the current version.

  3. Click Update Playbook.

  4. To access a version of a playbook:

    1. Click the icon next to New Playbook. The tooltip displays Version history for all Playbooks.

      playbook-version.png

    2. Search for the required playbook. The description that was entered when the version was saved should help you locate the version you now require.

    3. Click Restore to restore the required version of the playbook.