https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541150#M580 <P>Is there a way to schedule a playbook run without having any container? Is it possible?</P> Wed, 24 Feb 2021 10:21:41 GMT drew19 2021-02-24T10:21:41Z https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541150#M580 <P>Is there a way to schedule a playbook run without having any container? Is it possible?</P> Wed, 24 Feb 2021 10:21:41 GMT https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541150#M580 drew19 2021-02-24T10:21:41Z https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541154#M581 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/231842">@drew19</a>&nbsp;A playbook always needs a container, but if you need playbooks to run without an "Alert" creating the container, the Phantom Timer app (<A href="https://my.phantom.us/4.10/docs/app_reference/phantom_timer" target="_self">here</A>) will create empty containers on a schedule with a selected label defined. Any active playbooks against that label will then pick this up when created and process as per usual.</P> Wed, 24 Feb 2021 10:26:40 GMT https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541154#M581 phanTom 2021-02-24T10:26:40Z https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541157#M584 <P>Thank you! <span class="lia-unicode-emoji" title=":red_heart:">❤️</span>&nbsp;</P> Wed, 24 Feb 2021 10:32:19 GMT https://community.splunk.com/t5/Splunk-SOAR/Playbook-scheduling-without-containers/m-p/541157#M584 drew19 2021-02-24T10:32:19Z