Skip to main content
POST
Execute concurrent investigations for multiple issues

Authorizations

Authorization
string
header
required

JWT token obtained from Auth0

Body

application/json
inputList
object[]
required

Array of playbook execution inputs (maximum 10 items)

Required array length: 1 - 10 elements

Playbook execution input. Either messageLink or time must be provided to specify when the issue occurred. If bookName is not provided, either messageLink or title must be specified to identify which playbook to run.

Example:
liveRun
boolean
default:false

If true, sends enrichment results to the incident management tool for all executions

channelId
string

A Slack channel ID where results should be posted

Example:

"C1234567890"

Response

Batch playbook execution completed

error
string

Error message if the playbook execution failed

Example:

"Failed to execute playbook: timeout"

highlights
string

Bottom-line summary containing root cause analysis, conclusions, and key insights derived from the playbook execution

Example:

"Root cause: Database connection pool exhaustion. The CPU spike correlates with increased database queries from the application layer. Immediate action: Scale database connection pool from 20 to 50 connections."

gadgetsHighlights
object[]

Array of gadget highlight results

Link to the Slack message thread where enrichment results were posted (only present when channelId was specified)

Example:

"https://slack.com/archives/C1234567890/p6543210987654321"

actionableMitigations
object[]

Array of actionable mitigations

actionResults
object[]

Array of action execution results