DeDup incidents Deprecated Hidden

Deprecated. Check for duplicate incidents for the current incident, and close it if any duplicate has found.

Deprecated Content (Deprecated) · 5 tasks · 5 inputs · 1 output

Details

ID	`close_incident_if_duplicate_found`
From Version	5.0.0
Tasks	5

README

DEPRECATED. Checks for duplicate incidents for the current incident, and close it if any duplicate has found.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

CloseInvestigationAsDuplicate
FindSimilarIncidents

Commands

This playbook does not use any commands.

Playbook Inputs

Name	Description	Default Value	Required
similarIncidentKeys	The identical incident keys.	-	Optional
similarLabels	The identical similar labels keys. You allow difference in X words between labels. For example, the input: Email\subject:2,Email\from Will demand: 1. Email\from to be identical 2. Email\subject to be similar with 2 max words difference	-	Optional
similarContextKeys	Identical Similar context keys. You allow difference in X words between values.	-	Optional
similarCustomFields	Identical Similar custom fields. You allow difference in X words between values.	-	Optional
hoursBack	Checks incidents within X hours back.	24	Optional

Playbook Outputs

Path	Description	Type
isSimilarIncidentFound	Whether the similar incident was found. Must be, “true” or “false”.	unknown

Playbook Image

DeDup_incidents

Inputs

similarIncidentKeys — Identical incident keys
similarLabels — Identical\Similar labels keys. You allow difference in X words between labels. For example, the input: Email\subject:2,Email\from Will demand: 1. Email\from to be identical 2. Email\subject to be similar with 2 max words difference
similarContextKeys — Identical\Similar context keys. You allow difference in X words between values.
similarCustomFields — Identical\Similar custom fields. You allow difference in X words between values.
hoursBack — Check incidents within X hours back.

Outputs

isSimilarIncidentFound — Is similar incident found? (true\false)

Flowchart

Source

playbook-DeDup_incidents.yml playbook-DeDup_incidents_-_ML.yml playbook-DeDup_incidents_-_ML_README.md

Download History Raw

id: dedup_incidents_-_ml
version: -1
name: DeDup incidents - ML
fromversion: "5.0.0"
description: Deprecated. Check for duplicate incidents for the current incident, and close it if any duplicate has been found by machine-learning  find duplicates automation.
hidden: true
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: d49b7743-f43f-4677-8766-c9f16d3fc0ab
    type: start
    task:
      id: d49b7743-f43f-4677-8766-c9f16d3fc0ab
      version: -1
      description: ""
      name: ""
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "1"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 265,
          "y": 51
        }
      }
  "1":
    id: "1"
    taskid: 19915cbc-3042-425d-8254-c3be9c291076
    type: regular
    task:
      id: 19915cbc-3042-425d-8254-c3be9c291076
      version: -1
      name: Find duplicate incidents
      description: Find duplicate incidents using machine-learning.
      scriptName: GetDuplicatesMlv2
      type: regular
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "2"
    scriptarguments:
      UseLocalEnvDuplicatesInLastDays: {}
      compareEmailLabels: {}
      compareIncidentTimeDiff: {}
      compareIndicators: {}
      compareOtherLabels: {}
      ignoreClosedIncidents: {}
      ipComparisonSubnetMask: {}
      maxCandidates: {}
      maxNumberOfIncidents: {}
      threshold: {}
      timeFrameDays: {}
    results:
    - foundDuplicates
    - duplicateCandidateList
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 265,
          "y": 196
        }
      }
  "2":
    id: "2"
    taskid: 2ffa4239-003c-490a-849e-f910383a5ae0
    type: condition
    task:
      id: 2ffa4239-003c-490a-849e-f910383a5ae0
      version: -1
      description: ""
      name: Is duplicate candidate found?
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "4"
      "yes":
      - "6"
    scriptarguments:
      left:
        simple: ${foundDuplicates}
      right:
        simple: "true"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: general.isExists
          left:
            value:
              simple: foundDuplicates
            iscontext: true
    view: |-
      {
        "position": {
          "x": 265,
          "y": 370
        }
      }
  "3":
    id: "3"
    taskid: 4a8be468-2af6-4427-8ee8-a71d450260ee
    type: regular
    task:
      id: 4a8be468-2af6-4427-8ee8-a71d450260ee
      version: -1
      description: ""
      name: Print candidate
      scriptName: Print
      type: regular
      iscommand: false
      brand: ""
    scriptarguments:
      value:
        simple: Found ${duplicateCandidate.rawId} as duplicate candidate, but didn't closed automatically (below threshold)
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 265,
          "y": 720
        }
      }
  "4":
    id: "4"
    taskid: 91676756-8dd8-41fc-801e-b19c98a5b048
    type: regular
    task:
      id: 91676756-8dd8-41fc-801e-b19c98a5b048
      version: -1
      description: ""
      name: No duplicates found
      scriptName: Print
      type: regular
      iscommand: false
      brand: ""
    scriptarguments:
      value:
        simple: No duplicates incidents found
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 545
        }
      }
  "5":
    id: "5"
    taskid: fd106344-04d3-429b-8fb4-dced0a7a085f
    type: regular
    task:
      id: fd106344-04d3-429b-8fb4-dced0a7a085f
      version: -1
      description: ""
      name: Close investigation as duplicate
      scriptName: CloseInvestigationAsDuplicate
      type: regular
      iscommand: false
      brand: ""
    scriptarguments:
      duplicate_id:
        simple: ${duplicateCandidate.Id}
      duplicateId:
        simple: ${duplicateCandidate.rawId}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 695,
          "y": 720
        }
      }
  "6":
    id: "6"
    taskid: 7cc3505f-3571-414c-88bd-a60c8a0e3919
    type: condition
    task:
      id: 7cc3505f-3571-414c-88bd-a60c8a0e3919
      version: -1
      name: Is duplicate score above threshold?
      description: Check if the candidate for duplicate incident score is above the threshold.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "3"
      "yes":
      - "5"
    scriptarguments:
      first:
        simple: ${duplicateCandidate.duplicateProbability}
      second:
        simple: ${inputs.closeThreshold}
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: number.greaterThanOrEqual
          left:
            value:
              simple: duplicateCandidate.duplicateProbability
            iscontext: true
          right:
            value:
              simple: inputs.closeThreshold
            iscontext: true
    view: |-
      {
        "position": {
          "x": 480,
          "y": 545
        }
      }
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 764,
        "width": 1025,
        "x": 50,
        "y": 51
      }
    }
  }
inputs:
- key: closeThreshold
  value:
    simple: "0.75"
  required: true
  description: Candidate with score above this threshold will close the investigation automatically, and mark as duplicate to the current incident.
outputs:
- contextPath: foundDuplicates
  description: found any duplicate incident?
  type: boolean
- contextPath: duplicateCandidate
  description: the duplicate top candidate
  type: unknown
tests:
- No Test
deprecated: true