Abstract
From the Alerts page, you can run or rerun a playbook on one or more alerts.
You can run or rerun a playbook on one or more alerts. If there is currently a playbook running on one or more of the selected alerts, the Run Playbook option does not appear. If a playbook is running on the alert, but has been paused (for example, waiting for a user action), you can select to rerun the playbook or select a new playbook.
Right-click one or more alerts in the table and select .
If the alerts have a playbook already assigned, choose or . If the playbooks do not have a playbook assigned, .
If you are not rerunning the current assigned playbook, select a playbook to run for the selected alert(s).
Click .