Updating Playbooks

To update your FortiSOAR playbooks, take the following steps.

Note: You must create a FortiSIEM user in FortiSOAR before proceeding with these steps. For more information, see here.

1. From RESOURCES > Playbooks > FortiSOAR Playbooks, click Update.

2. From the Update Playbook window, in the URL row, click the pencil icon to configure how FortiSIEM will connect with FortiSOAR. If there is an existing configuration, click the Edit icon to modify it.

   1. In the Host Name field, enter the IP address of the FortiSOAR application.

   2. In the User Name field, enter the username to access the FortiSOAR application.

   3. In the Password field, enter the password associated with the username for FortiSOAR application access.

   4. When done, click Save.

3. From the Update Playbook window, in the Schedule row, click + to create a new schedule, or the Edit icon to modify an existing one.

   1. In the Start Time field, enter the time when FortiSIEM will connect to FortiSOAR to retrieve any updated Playbooks.

   2. In the next two drop-down lists, define the time by selecting the appropriate time zone and region.

   3. Under Recurrence Pattern , select how frequently FortiSIEM will connect to FortiSOAR to check FortiSOAR Playbooks. Choices are: Once, Hourly, Daily, Weekly, or Monthly.

   4. Click on the Start Now field, and enter or select the Month, Day, and Year when update(s) should occur. The format is mm/dd/yyyy.

   5. When done, click Save.