The visual editor for classic playbooks was removed from Splunk SOAR in release 6.4.0. Convert your classic playbooks to modern mode. Your classic playbooks will continue to run and you can view and edit them in the SOAR Python code editor.
For details, see:
For details, see:
View the action run history
You can view the history of actions run on your instance.
- From the Home menu, select Administration.
- Select System Health > Action Run History.
The Action Run History page displays a sortable list of action runs. Each column except for View Results is sortable. The table displays the following columns:
| Column name | Description |
|---|---|
| Name | The name of the action that was run. |
| Run ID | The numeric ID of the action that was run. |
| Event ID | The numeric ID of the event the action was run against. |
| Start Time | The time the action started. |
| End Time | The time the action finished. |
| Status | Whether the action succeeded or failed. |
| Prompted | If the action taken was a prompt or manual task action, the ID of the user assigned the action appears here. |
| Run By | The name of the user who ran the action. |
| View Results | A hyperlink to the action results in Investigation. For prompt or manual task actions, the link opens a window containing the prompt or task results. |
Last modified on 31 January, 2023
| View Playbook Run Statistics | Use ITSI to monitor the health of your deployment |
This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.3.3, 5.3.4, 5.3.5, 5.3.6, 5.4.0, 5.5.0, 6.0.0, 6.0.1, 6.0.2, 6.1.0, 6.1.1, 6.2.0, 6.2.1, 6.2.2, 6.3.0, 6.3.1, 6.4.0
Download manual
Feedback submitted, thanks!