Workflows

The "Workflows" section of InsightConnect acts as your workflow manager. View, build, modify, activate, and configure workflows here.

Workflows are sorted by state:

  • Active - the workflow is active and will create jobs if triggered
  • Draft - the workflow is incomplete, currently being built, or ready for activation
  • Inactive - the workflow is retired, but can be re-activated

Workflow Actions

From the workflow manager pages, you can perform actions on individual workflows by clicking the ellipsis at the end of each workflow card.

For active workflows, you can:

  • run the workflow
  • create a draft from the workflow
  • edit the workflow's corresponding draft, if one exists
  • view the active version of the workflow
  • deactivate the workflow
  • delete the workflow

For draft workflows, you can:

  • edit the workflow draft
  • delete the workflow draft
  • activate the workflow draft

For inactive workflows, you can:

  • reactivate the workflow
  • create a draft from the workflow
  • delete the workflow

Active-Draft Pairs

Active and draft workflows are uniquely related. There are three scenarios for this relationship:

  • Draft-only - you build a draft workflow, but don't activate it
  • Active-only - you build and activate a workflow, but no draft exists
  • Paired workflows - you build and activate a workflow, and a draft exists Each case impacts the available actions for the workflow.

Draft-Only Workflows

Draft workflows that have not been activated are the easiest case to work with. To create an Active-Draft workflow pair, click Activate in the draft's workflow builder, and click Continue Editing on the pop-up. You can also click Create Draft from the "Active Worklows" screen.

Active-Only Workflows

Active workflows without corresponding drafts likely have no current draft or had the draft deleted. To create an Active-Draft workflow pair, click the ellipses on the workflow's card and choose Create Draft. The new draft will be available on the drafts page, with the same name as the active workflow. There can be only 1 draft for each workflow.

Paired Workflows

Active-Draft workflow pairs help you to make adjustments to active, running workflows without interfering with the jobs these workflows are currently creating. You can make as many edits to the draft workflow as you need, then activate the draft to replace the older active workflow with the edited workflow. The old version of the workflow is marked as a version in history, and is no longer the active version.

The use case below further illustrates how you might work with a workflow pair.

Workflow Pairs in Action

An InsightConnect user in a corporate security team builds and activates a phishing workflow called "MailFlow.” “MailFlow” contains a GMail trigger and steps to check the sender's IP addresses, lock down email accounts, and block future emails from that sender.

The active "MailFlow" has been creating jobs for every account in the user's enterprise GMail instance that triggers the workflow. However, the user begins to think that the problem is worse than they thought, and wants to add an Artifact Step to collect data for efficient reporting. To create a draft version of “MailFlow,” the user clicks Create Draft from the “MailFlow” dropdown menu in the workflow manager.

The "MailFlow" draft is perfect for adding new steps. The user edits the draft to suit their new needs and clicks Activate.

InsightConnect automatically replaces the original "MailFlow" with the updated version created by the draft. The original "MailFlow" is automatically deactivated and can be found on the "Inactive" page in the "Workflows" section.

Workflow Builder

To build a new workflow click Create New from any of the workflow manager pages. This will open the workflow builder and immediately prompt you to set up a trigger. If you need to edit an existing workflow, open the workflow builder by clicking the ellipsis on a workflow card, then Create Draft or Edit Draft.