Write jobs

Supported in:

The Jobs Scheduler page contains default Google Security Operations jobs, as well as jobs that are created in the IDE and are scripts that can be scheduled to run periodically. Jobs can access data in all environments.

The following predefined jobs are available:

Option Description
Actions Monitor Notifies if a specific action has failed at least three times, across all cases it was performed in (to a predefined email, as set in the Siemplify integration configuration in the Google SecOps Marketplace.)
Connectors Monitor Notifies regarding any Connectors errors in the alert ingestion process.
Machine Resource Utilization Notifies if the machine resource utilization is close to full usage, according to the following default rules:
CPU – over 90%
MEM – over 85%
Drive – over 80%.
ETL Notifies regarding any error in the ETL alert ingestion process.
Jobs Monitor Notifies if a specific job has failed at least three times (sends a notification for each specific job once every three hours).

Configure a new job

  1. Create the job in the IDE. Refer to Using the IDE for more details.
  2. In the left navigation, go to Response > Jobs Scheduler. The Jobs Scheduler page appears.
  3. Select add Create new job.
  4. Select the job you created in the IDE and click Save.
  5. Enter the scheduler information for when the script should run.
  6. Click Save.
  7. Optional: Click Run Now to run the script immediately.

Need more help? Get answers from Community members and Google SecOps professionals.