Configure timeouts for playbook async actions

Supported in:

Async actions can have individual timeouts configured in the IDE and afterwards managed in the playbook action step.

Configure timeouts for playbook async actions

  1. In the Google Security Operations platform, navigate to Response > IDE .
  2. Click add Create New Item to create a new action. Fill out the details. Select Async from the Action Type menu and click Create.
  3. On the right side of the page, you will see various timeouts to fill out in the Timeout configuration section:
    • Script Timeout: the amount of time for a single iteration of the action to run to get a result (20 minutes is the maximum)
    • Async Action Timeout: the amount of time until the action should stop running altogether
    • Async Polling Interval: the amount of time the action waits before trying again

      You can also add individual parameters in the Details tab.
    configuretimeouts2
  4. Make sure to enable the action and click Save.
  5. Navigate to Response > Playbooks.
  6. Select an existing playbook or create a new one and drag your new action in.
  7. Click the action. You will see the Async Action Timeout and Async Polling Interval fields displayed here with the amounts you configured in the IDE.

    You can change the amounts in the playbook step itself. This means you can change each individual playbook step with different amounts for the same action. If after this, you make further changes in the IDE, they won't be reflected in this action.
configuretimeouts3