Skip to main content

Workflow Template: Poll for new Veeam ONE Alarm and Open a Torq Case

Creates a case in Torq when security-related alarms in Veeam ONE are triggered in a Warning or Error state.

Updated over a week ago

The "Poll for new Veeam ONE Alarm and Open a Torq Case" workflow template is designed to enhance security alert management by automatically creating cases in Torq when Veeam ONE triggers alarms in a Warning or Error state. This ensures critical security alerts are promptly tracked and investigated. The workflow sets the severity and SLA for each case based on the alarm status, with predefined actions for different alarm levels, and attaches a relevant runbook for streamlined incident response.

Use Cases

Case Management , DSPM

Workflow Breakdown

  1. Creates a case in Torq using a field mapper when security-related alarms in Veeam ONE are triggered in a Warning or Error state.

  2. Helps ensure that important security alerts are tracked and investigated in Torq.

  3. Sets the severity and SLA for each case in Veeam based on the alarm status.

  4. If the Veeam ONE alarm status is Warning, the Torq severity is set to HIGH , and the SLA is 4 hours.

  5. If the Veeam ONE alarm status is Error severity is Infected, the Torq severity is set to CRITICAL, and the SLA is 1 hour.

  6. Attaches a predefined Runbook

Vendors

Utils, Torq Cases

Did this answer your question?