Associate workflows with Alert Categories

On the NDR, click the and navigate to HYPERAUTOMATION > Workflows.
The Hyperautomation Workflows page is displayed.
For the workflow you intend to map to alert category, click and then select Alert Category Mapping.
The Alert Category Mapping page is displayed.
To run the workflow, provide the following parameters:
1. For each alert category, select the trigger type: Manual or Automatic.
2. Click +Add to add a new alert category.
3. Click the dropdown menu, select an alert category.
4. Configure associated parameters for the workflow by selecting an alert field to look up the value when triggered.
5. Click Save. The workflow is now associated with the alert category.
6. To edit an association, select an alert category from the list, update its parameter configuration or change the trigger type.
7. To delete an association, select one or more alert categories and click Delete. Confirm the deletion as this action cannot be undone.

Manually run a workflow

You can manually trigger workflows when you need to intervene or run specific response actions on demand. This option gives you control to execute workflows outside of automated triggers, useful for investigation or special cases.

Click the , click Alerts to navigate to the Alert list view.
From alert actions, select View Response Actions.
The Respond panel displays a list of associated workflows.
Choose the workflow to run and Run workflow.
Configure the required parameters. You can select an alert field key to look up the value.
Click Run.

Automatically run a workflow

Set workflows to run automatically based on alert triggers. This automation reduces response time by executing predefined actions immediately when relevant alerts are observed in NDR.

Delete Alert Categories

Choose the alert category you want to delete and click Delete. Confirm the deletion as this action cannot be undone.

Note
Always review the corresponding workflow mapping in NDR Console when modifying workflow parameters within a Hyperautomation.
Older workflow versions will continue to execute until you explicitly map and save the updated version in the NDR.