DeDup incidents - ML Deprecated Hidden
Deprecated. Check for duplicate incidents for the current incident, and close it if any duplicate has been found by machine-learning find duplicates automation.
Deprecated Content (Deprecated) · 7 tasks · 1 input · 2 outputs
Details
| ID | dedup_incidents_-_ml |
|---|---|
| From Version | 5.0.0 |
| Tasks | 7 |
README
DEPRECATED. Checks for duplicate incidents of the current incident, and closes it if a duplicate has been found. This is accomplished though the machine-learning find duplicates automation.
Dependencies
This playbook uses the following sub-playbooks, integrations, and scripts.
Sub-playbooks
This playbook does not use any sub-playbooks.
Integrations
This playbook does not use any integrations.
Scripts
- GetDuplicatesMlv2
- CloseInvestigationAsDuplicate
Commands
This playbook does not use any commands.
Playbook Inputs
| Name | Description | Default Value | Required |
|---|---|---|---|
| closeThreshold | The candidate with a score above the threshold will close the investigation automatically, and mark it as a duplicate to the current incident. | 0.75 | Required |
Playbook Outputs
| Path | Description | Type |
|---|---|---|
| foundDuplicates | Whether any duplicate incidents were found. | boolean |
| duplicateCandidate | The duplicate top candidate. | unknown |
Playbook Image

Inputs
closeThreshold— Candidate with score above this threshold will close the investigation automatically, and mark as duplicate to the current incident.
Outputs
foundDuplicates— found any duplicate incident?duplicateCandidate— the duplicate top candidate
Flowchart
id: dedup_incidents_-_ml version: -1 name: DeDup incidents - ML fromversion: "5.0.0" description: Deprecated. Check for duplicate incidents for the current incident, and close it if any duplicate has been found by machine-learning find duplicates automation. hidden: true starttaskid: "0" tasks: "0": id: "0" taskid: d49b7743-f43f-4677-8766-c9f16d3fc0ab type: start task: id: d49b7743-f43f-4677-8766-c9f16d3fc0ab version: -1 description: "" name: "" iscommand: false brand: "" nexttasks: '#none#': - "1" separatecontext: false view: |- { "position": { "x": 265, "y": 51 } } "1": id: "1" taskid: 19915cbc-3042-425d-8254-c3be9c291076 type: regular task: id: 19915cbc-3042-425d-8254-c3be9c291076 version: -1 name: Find duplicate incidents description: Find duplicate incidents using machine-learning. scriptName: GetDuplicatesMlv2 type: regular iscommand: false brand: "" nexttasks: '#none#': - "2" scriptarguments: UseLocalEnvDuplicatesInLastDays: {} compareEmailLabels: {} compareIncidentTimeDiff: {} compareIndicators: {} compareOtherLabels: {} ignoreClosedIncidents: {} ipComparisonSubnetMask: {} maxCandidates: {} maxNumberOfIncidents: {} threshold: {} timeFrameDays: {} results: - foundDuplicates - duplicateCandidateList separatecontext: false view: |- { "position": { "x": 265, "y": 196 } } "2": id: "2" taskid: 2ffa4239-003c-490a-849e-f910383a5ae0 type: condition task: id: 2ffa4239-003c-490a-849e-f910383a5ae0 version: -1 description: "" name: Is duplicate candidate found? type: condition iscommand: false brand: "" nexttasks: '#default#': - "4" "yes": - "6" scriptarguments: left: simple: ${foundDuplicates} right: simple: "true" separatecontext: false conditions: - label: "yes" condition: - - operator: general.isExists left: value: simple: foundDuplicates iscontext: true view: |- { "position": { "x": 265, "y": 370 } } "3": id: "3" taskid: 4a8be468-2af6-4427-8ee8-a71d450260ee type: regular task: id: 4a8be468-2af6-4427-8ee8-a71d450260ee version: -1 description: "" name: Print candidate scriptName: Print type: regular iscommand: false brand: "" scriptarguments: value: simple: Found ${duplicateCandidate.rawId} as duplicate candidate, but didn't closed automatically (below threshold) separatecontext: false view: |- { "position": { "x": 265, "y": 720 } } "4": id: "4" taskid: 91676756-8dd8-41fc-801e-b19c98a5b048 type: regular task: id: 91676756-8dd8-41fc-801e-b19c98a5b048 version: -1 description: "" name: No duplicates found scriptName: Print type: regular iscommand: false brand: "" scriptarguments: value: simple: No duplicates incidents found separatecontext: false view: |- { "position": { "x": 50, "y": 545 } } "5": id: "5" taskid: fd106344-04d3-429b-8fb4-dced0a7a085f type: regular task: id: fd106344-04d3-429b-8fb4-dced0a7a085f version: -1 description: "" name: Close investigation as duplicate scriptName: CloseInvestigationAsDuplicate type: regular iscommand: false brand: "" scriptarguments: duplicate_id: simple: ${duplicateCandidate.Id} duplicateId: simple: ${duplicateCandidate.rawId} separatecontext: false view: |- { "position": { "x": 695, "y": 720 } } "6": id: "6" taskid: 7cc3505f-3571-414c-88bd-a60c8a0e3919 type: condition task: id: 7cc3505f-3571-414c-88bd-a60c8a0e3919 version: -1 name: Is duplicate score above threshold? description: Check if the candidate for duplicate incident score is above the threshold. type: condition iscommand: false brand: "" nexttasks: '#default#': - "3" "yes": - "5" scriptarguments: first: simple: ${duplicateCandidate.duplicateProbability} second: simple: ${inputs.closeThreshold} separatecontext: false conditions: - label: "yes" condition: - - operator: number.greaterThanOrEqual left: value: simple: duplicateCandidate.duplicateProbability iscontext: true right: value: simple: inputs.closeThreshold iscontext: true view: |- { "position": { "x": 480, "y": 545 } } view: |- { "linkLabelsPosition": {}, "paper": { "dimensions": { "height": 764, "width": 1025, "x": 50, "y": 51 } } } inputs: - key: closeThreshold value: simple: "0.75" required: true description: Candidate with score above this threshold will close the investigation automatically, and mark as duplicate to the current incident. outputs: - contextPath: foundDuplicates description: found any duplicate incident? type: boolean - contextPath: duplicateCandidate description: the duplicate top candidate type: unknown tests: - No Test deprecated: true