Splunk SOAR

Is there a way to save and run a playbook without commiting changes to repo?

GeorgeOrwell
Explorer

I would like to run my playbooks after the changes have been introduced without making commit messages 

Labels (1)
0 Karma
1 Solution

phanTom
SplunkTrust
SplunkTrust

Hi @GeorgeOrwell , unfortunately each change needs to be committed to a repo before the changes will apply.

However, if the issue is always adding commit messages, there is a box you can tick that will "re-use" the last one each time you save. So if you just put the 1st message as "testing/developing" and tick the box, each time you save you won't be prompted for a message. To undo this just refresh the page and the next time you save you will be re-prompted for a commit message. 

Hope this helps. 

Happy SOARing!!

View solution in original post

0 Karma

phanTom
SplunkTrust
SplunkTrust

Hi @GeorgeOrwell , unfortunately each change needs to be committed to a repo before the changes will apply.

However, if the issue is always adding commit messages, there is a box you can tick that will "re-use" the last one each time you save. So if you just put the 1st message as "testing/developing" and tick the box, each time you save you won't be prompted for a message. To undo this just refresh the page and the next time you save you will be re-prompted for a commit message. 

Hope this helps. 

Happy SOARing!!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...