IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Playbooks are not visible in "Actions" drop down

  • 1.  Playbooks are not visible in "Actions" drop down

    Posted Mon March 13, 2023 09:28 AM

    I have created the playbooks in SOAR and enabled the same. The object type is incident and the set to manual. However, the created playbooks are not visible under "Actions" drop down when an incident is received to SOAR. Currently I have not created any rule or workflow other than the defaults. Appreciate if someone could provide an insight on the other configurations to be done in both SOAR and SIEM to make those playbooks visible. 



    ------------------------------
    Dissa
    ------------------------------