Technical Tip: Clearing playbook queues

FortiSOAR Knowledge Base

FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.

Article Id 199187

Description	This article describes that if playbooks run recursively and get executed infinitely, it is creating huge playbook queues that affect performance adversely.
Scope
Solution	To clear playbook queues, run the following commands: 1) csadm services --stop 2) systemctl start rabbitmq-server 3) rabbitmqctl purge_queue celery -p fsr-cluster 4) rabbitmqctl purge_queue queue.falcon.data -p intra-cyops 5) rabbitmqctl purge_queue queue.crudhub.data -p intra-cyops 6)csadm services --restart

1030

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.