The "Poll for new Veeam Backup & Replication Events and Open a Case" workflow template is designed to enhance incident response by automating case creation in Torq for malware events detected by Veeam Backup & Replication. It assigns severity and SLA based on the Veeam ONE alarm status, ensuring timely resolution. For instance, a "Warning" status sets the Torq severity to HIGH with a 4-hour SLA, while an "Error" status sets it to CRITICAL with a 1-hour SLA. This workflow streamlines case management and integrates a predefined runbook for efficient incident handling.
Use Cases
Case Management , DSPM
Workflow Breakdown
Upon detection of malware events, creates a case in Torq to investigate and resolve the issue.
Sets the severity and SLA for each case in Veeam based on the alarm status.
If the Veeam ONE alarm status is Warning, the Torq severity is set to HIGH , and the SLA is 4 hours.
If the Veeam ONE alarm status is Error severity is Infected, the Torq severity is set to CRITICAL, and the SLA is 1 hour.
Attaches a predefined Runbook
Vendors
Utils, Torq Cases