Skip to content

Playbook Schedules🔗

The Schedules tab displays all configured playbook execution schedules. Not all playbook templates support scheduled executions. See Configure Playbook for Scheduling for more information.

View Playbooks Schedules🔗

Open the Schedules tab to view a table of configured playbook execution schedules.

Playbook Schedules Tab

Select the name from the Playbook column to open the Playbook Details.

Configure Playbook for Scheduling🔗

While configuring the Playbook Execution of templates that support scheduling, choose the following options:

  1. How do you want to initiate this playbook?: Generic
  2. Playbook Usage: Playbook Schedule

Playbook Generic Execution

Note

The Generic execution option is greyed out if the template does not support scheduling.

Create Execution Schedule🔗

To create an execution schedule for a playbook configured to be scheduled, open the Playbook Details and follow these steps:

  1. Verify the playbook is enabled at the top right. Playbooks must be enabled to schedule executions.
  2. Select More Actions > Schedule Executions. The Schedule Playbook Execution form displays.

  3. In the Schedule Details section, enter a Schedule Name and Description to identify the schedule execution in XDR.

    Playbook Schedule Details

  4. In the Playbook Inputs section, verify the configuration dependent on the playbook template.

Note

Each playbook has built-in documentation that walks through the steps to create a new playbook. Select Documentation from a playbook template or configured playbook in XDR to open this in a new tab and follow the guidance there.

  1. In the Schedule Recurrence section, define the schedule the execution will follow.

    Playbook Schedule Recurrence

    Tip

    You can enter the condition in the Cron Expression field directly using cron format.

  2. Select Save to complete the schedule.

Verify Execution Schedule🔗

Verify the schedule is active using the Active column and check the schedule's next execution using the Next Run column.

Verify Playbook Schedule

Tip

You can also verify the schedule is active and view the schedule Cron Expression from the Scheduled Executions section on the Playbook Details page.

Scheduled Executions in Playbook Details

You can also view all upcoming scheduled executions from Automations Overview.

Edit, Pause, and Delete Execution Schedule🔗

Use the options in the Actions column to quickly Edit, Pause, or Delete a schedule.

Take Action on Playbook Schedules

Tip

You can also take these actions from the Scheduled Executions section on the Playbook Details page.

Scheduled Executions in Playbook Details

Knowledge Base Resource🔗

Find an example of configuring scheduled playbook executions using the Endpoint Tagging - Multi Playbook in this Knowledge Base article.