Use an Alert Type trigger in a playbook

Supported in:

This document describes how to use the Alert Type trigger to trigger a playbook, based on the Rule Generator name.

  1. Go to the Playbooks page and create a new playbook.
  2. Drag the Alert Type trigger to a playbook step and double-click it to open it. The Parameters field requires the Rule Generator name of each alert that can trigger this playbook. Select the Rule Generator name from the menu.
    If you don't remember the Rule Generator name of the alert you want to trigger, go to Cases > Overview. In the Alerts widget, click View Details. The side drawer opens with case details.
  3. Copy and paste this Rule Generator name, or select it from the menu.
  4. Continue building the playbook. Now, this Rule Generator triggers the playbook for generated alerts.

Need more help? Get answers from Community members and Google SecOps professionals.