Skip to main content

Use Automation to Generate Tickets

This article details how to create an automation to generate tickets when your data contain critical vulnerabilities.

Generate tickets on critical vulnerabilities​

One common use case of automation involves creating tickets when there are critical vulnerabilities in your data. To create this automation, follow these steps:

  1. Navigate to Automation.

  2. Click Create.

  3. Provide a title and description for the automation.

  4. Type the following Brinqa Query Language (BQL) query to find all active findings with a critical risk rating in your data:

    Find Finding AS f Where f.riskRating = "Critical" And f.status = "Active"

  5. Click Test to ensure that your query is valid and returns data.

  6. In Actions, select Create vulnerability ticket. More options appear.

  7. For Sprint, select the time frame for the ticket to be worked on. For example, Q1, Q2, Q3, or Q4.

  8. For SLA, select an SLA to associate with the tickets.

  9. For Grouping, select Type > Name and Type > Risk rating.

    tip

    Grouping puts the tickets into specific categories so a single ticket is created rather than one ticket for every finding returned by the query.

  10. For Assignment Policy, set a default owner. You can set it to a specific user, set it based on an attribute, or leave it unassigned.

  11. In Run, choose a method for the Automation to run. You can run the automation manually, set a schedule for the automation to run, or you can set the automation to run as part of your daily data orchestration.

  12. Click Create.

The Automation page reloads and your new automation appears in the list of available automations.

Run the automation​

To launch and run your automation manually, follow these steps:

  1. Navigate to Automation.

  2. Hold your pointer over your automation entry and click Run.

  3. Click Confirm when prompted.

  4. After a successful run of the automation, navigate to Remediation > Tickets > All to view the tickets that the automation has created.

  5. Hold your pointer over one of the tickets and click Show to view the details.