Forum Discussion
Sentinel alerts stopped running playbooks
I have at least four instances of Sentinel where the alerts create the incidents but don't run the associated playbooks. This seemed to have started somewhere around Dec 30th. There are no failed run...
An interesting thing, I created a dummy playbook, assigned it to the alert and it worked. I switched back to the original playbook and now the alert triggers it.
AdiGrio That's odd.
So you assigned the alert the new dummy playbook and reassigned the alert the old playbook?
leoszalkowski That's correct, I assigned a new playbook, saved, reassigned the old playbook and it worked after that. In fact you can just remove the existing playbook, save, and then reassign, no need for a "temporary" one. The problem is that I would have to do that for every alert configured. We have hundreds of them so I would rather not go that path.
- Good for you but strange for me. I tried that aswell. Twice. Also creating a new playbook from scratch And assigning but the result was the same. Maybe something have changed and I should try again. That or I’m missing something. But second time around I had me support in session so it shouldn’t be.
Anyone know if there is a place where ongoing issues are published?