Send Investigation Summary Reports

This playbook iterates over closed incidents, generates a summary report for each closed incident, and emails the reports to specified users.

Common Playbooks · 7 tasks · 4 inputs · 0 outputs

Details

IDSend Investigation Summary Reports
From Version5.0.0
Tasks7

README

Iterates over closed incidents, generates a summary report for each closed incident, and emails the reports to specified users.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Builtin

Scripts

  • SearchIncidentsV2
  • GenerateSummaryReports
  • Exists

Commands

  • send-mail
  • setIncident

Playbook Inputs

Name Description Default Value Required
MailTo The email address to mail the report to. None Required
ReportName The reports to generate. Investigation Summary Optional
ReportType The type of report. pdf Optional
IncidentSearchQuery The query used to search for incidents. Default query will search for all incidents closed within the last hour. -category:job status:closed closed:>=”1 hour ago” Optional

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Send_Investigation_Summary_Reports

Inputs

  • MailTo — Email address to mail the report to.
  • ReportName — Reports to generate.
  • ReportType — Type of report
  • IncidentSearchQuery — Query used to search for incidents. Default query will search for all incidents closed within the last hour.

Commands used

send-mail setIncident

Flowchart

yes Start Start Find Closed Incidents - SearchIncidentsV2 Find Closed Incidents SearchIncidentsV2 Generate Summary Report - GenerateSummaryReports Generate Summary Report GenerateSummaryReports Email Reports - send-mail Email Reports send-mail Set Report Done Label - setIncident Set Report Done Label setIncident Complete Complete Are there relevant closed incidents? - Exists Are there relevant closed... Exists

Source

playbook-Send_Investigation_Summary_Reports.yml playbook-Send_Investigation_Summary_Reports_Job.yml playbook-Send_Investigation_Summary_Reports_Job_README.md
Download History Raw 
Calls the sub-playbook, `Send Investigation Summary Reports`, and closes the incident. By default, the playbook will search all incidents closed within the last hour. This playbook should be run as as a scheduled job, whicn should run on a 15 minute interval. If you want to run the playbook more frequently, you should adjust the search query of the child playbook, `Send Investigation Summary`. Reports.

## Dependencies
This playbook uses the following sub-playbooks, integrations, and scripts.

### Sub-playbooks
* Send Investigation Summary Reports

### Integrations
* Builtin

### Scripts
* DeleteContext

### Commands
* closeInvestigation

## Playbook Inputs
---
There are no inputs for this playbook.

## Playbook Outputs
---
There are no outputs for this playbook.

## Playbook Image
---
![Send_Investigation_Summary_Reports_Job](../doc_files/Send_Investigation_Summary_Reports_Job.png)