Playbook Widget Behavior in Alert Overview

[jaymin]

Hi everyone,

I have created a playbook with multiple widgets. When no playbook is attached to a case, and I manually attach a playbook with widgets, the widgets are successfully created on the Alert Overview page (Scenario #1).

However, if a playbook with widgets is already attached, and I manually attach my playbook with widgets, no new widgets are created on the Alert Overview page (Scenario #2).

What should be the expected behavior in this scenario? I believe that when a playbook with widgets runs, it should override the Alert Overview and display the new widgets. Also the playbook widget has all the roles selected so any role can view the widgets.

I have attached few screenshot for your reference.
Looking forward to your insights!

Scenario #1

Scenario #2

[ylandovskyy · Accepted solution]

Hey @jaymin ,

Please refer to the comment added to this post: https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Playbook-Widget-Behavior-in-Alert-Overview/td-p/...