> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/siem/orchestration-soar-beta/flows.md).

# Flows

{% hint style="warning" %}
**Please note**: This view is currently in **Beta status**. User interface and functionalities can change at any time.

<i class="fa-eye">:eye:</i> This view is only visible if you have enabled the **Enable beta features** option under **Settings** → [User Account](/docs/manual/english/administration/settings/user-account.md).
{% endhint %}

***

In Enginsight, a flow is a single run of a playbook.

***

<i class="fa-compass">:compass:</i> Navigate to **SIEM** → **Orchestration (SOAR)** → **Flows** to show a list of all playbook runs. If no playbook has been run yet, this view is empty.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FjPc8f2Y6KJEnpRj4cgb3%2Fenginsight-screenshot-siem-orchestration-flows.jpg?alt=media&amp;token=ab3a6018-3a9a-44bd-b706-ae411724c4d1" alt=""><figcaption></figcaption></figure>

The [flow overview](#flows-overview) provides information such as:

* which playbook generated the flow.
* the period during which the playbook was run.
* how long the playbook run took.

You can also navigate to the [detail view of a flow](#flow-detail-view) to show detailed information about a playbook run.

***

## Navigation

<i class="fa-magnifying-glass">:magnifying-glass:</i> Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly.

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Refresh** icon <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> above the list to update all list items.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages.&#x20;

### Filtering the List

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Filter** icon <i class="fa-filter">:filter:</i> above the list to filter the list by predefined parameters.

<details>

<summary>Available Filters</summary>

<table><thead><tr><th width="206.60546875">Parameter</th><th width="116.515625">Type</th><th>Description</th></tr></thead><tbody><tr><td>Playbook</td><td>String</td><td>Filter by a specific playbook that generated the flow, or exclude it from the results. All available playbooks are shown.</td></tr><tr><td>Status</td><td>String</td><td>Filter by all flows with a specific status, or exclude them from the results. All available states are shown.</td></tr></tbody></table>

</details>

### Sorting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Sort** icon <i class="fa-sort">:sort:</i> next to a column name in the table header to sort by that column in ascending <i class="fa-angle-up">:angle-up:</i> or descending order <i class="fa-chevron-down">:chevron-down:</i> .

<i class="fa-computer-mouse">:computer-mouse:</i> Click the sort icon <i class="fa-bars-sort">:bars-sort:</i> above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority.

***

## Flows: Overview

The flow overview is structured as a table.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FGNWnenNmd2lGxOrHiQje%2Fenginsight-screenshot-siem-orchestration-flows%20overview.jpg?alt=media&amp;token=31a85284-868c-4dc1-a34d-f0df0bdf9f44" alt=""><figcaption></figcaption></figure>

The following information is shown:

<table><thead><tr><th width="200.3125">Column</th><th>Description</th></tr></thead><tbody><tr><td>Status</td><td><p>Shows the status of the corresponding flow.</p><p></p><p>The following states can be shown:</p><ul><li><strong>Finished</strong>: The playbook run is complete.</li><li><strong>Running</strong>: The playbook is currently running.</li><li><strong>Error</strong>: An error occurred while the playbook was running. The run was terminated.</li></ul></td></tr><tr><td>Flow ID</td><td><p>Shows the unique identifier of the respective flow.</p><p></p><p>The start and end times of the playbook run are also shown.</p><p><br><i class="fa-computer-mouse">:computer-mouse:</i> Click a flow ID to navigate to the respective <a href="#flow-detail-view">detail view</a>. Here you can trace the playbook run in detail.</p></td></tr><tr><td>Duration</td><td>Shows how long the respective playbook run took.</td></tr><tr><td>Playbook (Revision)</td><td><p>Shows the name of the playbook that generated the respective flow and an additional description, if provided.</p><p></p><p>The revision ID, which indicates the current version of the playbook, is also shown.</p></td></tr></tbody></table>

***

## Flow: Detail View

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Flow ID** column of a list item to navigate to the [flow detail view](/docs/manual/english/platform-usage/siem/orchestration-soar-beta/flows/flow-detail-view.md).

***
