"No playbook found Please contact your administrator" error while accessing playbook from Security Incident New UI

Gazal Varshney2 · ‎03-25-2020

Hi,

I have enabled the OOB plugins for SIR and SIR UI and need to access playbooks from security incident New UI. While clicking on playbook icon I am getting the message "No playbook found , Please contact your administrator". all the runbooks are in active state and I am having ghe required role to access playbooks as well. Looking for solutions to resolve this issue.

Thanks,

Gazal Varshney

Ashutosh Munot1 · ‎03-25-2020

Hi,

One more thing the task are visible in this section based on workflow i.e. playbook attached to this incident. The workflow name for phishing is Security Incident - Phishing - Template.

And then you need to create a document which will have condition attached to it. It is called as Manual runbook. It is OOB.

Thanks,
Ashutosh

View solution in original post

Ashutosh Munot1 · ‎03-25-2020

Hi,

How many plugins got activated? Have you missed the dependencies?

Thanks,
Ashutosh

Gazal Varshney2 · ‎03-25-2020

Hi Ashutosh,

Yes dependencies plugin is activated. below plugins for SIR are activated:

SIR UI
SIR
SIR mobile
SIR dependencies
PA for SIR

Regards,
Gazal Varshney

Ashutosh Munot1 · ‎03-25-2020

HI,

I did it recently and it works fine. Can you show me the screenshot of error please.

Thanks,
Ashutosh

Gazal Varshney2 · ‎03-25-2020

PFA screenshot. do we need any access role or need to configure some property to get it enable? this error is for incident with category "Phishing". Expected behaviour is phishing playbook should be attached.