View and Search for Runs

Use the showing runs from drop-down list to choose the time frame of the run data you want to see.

After you select an option, the data in the results will update to match your selection.

Choose Custom Range to set From and To dates and click Save.

The list of runs displays the following information for the displayed runs:

• Display name - Displays the workflow name. The colored lines beside the workflow names denote the status of the run.
  • Green - The run completed successfully.
  • Red - The run failed. Click the workflow name to open the workflow in the Workflow Editor and investigate.
  • Orange - The run is currently in progress.
• Status - Displays the current status of the workflow. The visible statuses are dependent on the Last Run Status filters you have checked.
• Started on - Displays the start date and time of the run.
• Ended on - Displays the end date and time of the run.
• Started by - Displays the username of the user who started the run or if the workflow was started by a playbook task or incident automation rule.
• Owner - Displays the username of the user who created the workflow.
• Actions - Displays the available actions for a workflow. For more information, see the Change Run Status and Delete a Run Help topics.

When you click on a run, the Run drawer opens on the right, which displays a summary of the workflow execution to help you quickly understand it at a high level.

The summary includes information such as description, started by, started on, ended on, status, variables, and any error messages.

• To close the drawer, click the X at the top-right corner or anywhere outside the drawer.

• With the drawer open, you can click on other runs to view their summaries, enabling you to look through multiple runs quickly.

• To bypass the Run drawer and view the run details directly, either click the open in window icon next to the name or hold down the command (Mac) or Ctrl (Windows) key when you click on a run.

Detailed run data is retained for 30 days, during which time you can click View run details to see more information.

When you click View run details to see more information, Automation displays the detailed run data in a Workflow Editor environment. View what the workflow and its activities did, including which parts succeeded or failed.

The Workflow Properties section provides a summary of general information, response options, prompt response, variables, automation rules, targets, and output values from the workflow execution.

For example, for an incident response workflow, output values from the workflow execution include the following, which get appended to the notes in the incident's worklog:

• Started By (Type) - shows the workflow was initiated by a "playbook task" or "incident automation rule"

• Workflow Result - a string such as "investigation completed" (can also be entered in Markdown language)

• Workflow Result Code - an auto-populated string, such as "started," "workflow-errored," or "completed-successfully"

Click on each activity to show its particular properties, including output values such as JSON output which you may copy for further use.