Description
In cases where a scheduled playbook or any manually triggered playbook execution fails, it may be a good practice or even required that a user gets notified about the failure proactively so that necessary actions can be taken to debug the playbook.
This technote describes how to achieve sending a notification to a user when a particular playbook fails to execute successfully.
Resolution
Playbooks attached with this article are designed to monitor the workflows of playbooks that are being executed. Users can import the appropriate playbook, depending on their CyOPs™ version, to their CyOPs™ instance and create a schedule to run the playbook at specific time intervals, using Automation > Schedules on the left navigation pane of CyOPs™ UI. The playbooks perform checks on a particular playbook that is being executed and it sends notifications to the specified users if it detects any failure in that particular playbook's execution during its periodic checks.
Following playbooks are attached:
If your CyOPs™ version is equal to or higher than 5.1.0, then import the Playbook Collections (2019114346)_Version_EqualTo_And_Later_Than_5_1.json
playbook collection.
If your CyOPs™ version is lesser than 5.1.0, then import the 1 Playbook - 11 - Draft (2019212712)_Versions_Earlier_Than_5_1.json
playbook collection.
Steps involved in scheduling the "Notify for failed playbooks" playbook:
Playbook Collections (2019114346)_Version_EqualTo_And_Later_Than_5_1.json
playbook collection if your CyOPs™ version is 5.1.0 or later. Download 1 Playbook - 11 - Draft (2019212712)_Versions_Earlier_Than_5_1.json
playbook collection if your CyOPs™ version is earlier than 5.1.0.When the playbook runs successfully according to the schedule and detects any failure in the execution of a specified playbook (as per UUID provided in a schedule), it sends notifications to the users using CyOPs™ SMTP connector.
Applicable Version:
Any CyOPs™ version.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.