Quick Actions

LAST UPDATED: JAN 21, 2025

Quick actions are interactive buttons within the Overview module of the incident workspace, located beneath the incident header panel. They execute specific D3 integration or utility commands with customized parameters.

These incident-specific features—created with unique incident numbers—eliminate the need to manually search for commands using the Execute Command button. Quick actions can be managed via using the following utility commands:

• Add Quick Actions to the Incident Overview: To create new quick actions.

• Delete Quick Actions to the Incident Overview: To remove existing quick actions.

• Update Quick Actions to the Incident Overview: To modify existing quick actions.

Procedure for Adding Quick Actions

By default, no quick actions are available for use. Create your first quick actions by following the steps below:

1. Navigate to the Utility Commands module.

   

   1. Click on the Configuration navigation link.

   2. Click on the Utility Commands icon.

2. Search and click into the system utility command Add Quick Actions to the Incident Overview.

   

3. Ensure that the Ad-hoc Command option is checked under Command Application Scope in the Settings tab.

   

   This option must be selected for any command users want to add as a quick action.

4. Add itself and the Delete Quick Actions to the Incident Overview command as quick actions.

   

   1. Enter a unique incident number.

   2. Paste the following code snippet (replace the incident number) for the Quick actions parameter:

      JSON

      [
          {
              "ActionName": "Add quick action",
              "CommandName": "Add Quick Actions to the Incident Overview",
              "CommandParameters": {
                  "Incident number": "20241220-94"
              }
          },
          {
              "ActionName": "Delete quick action",
              "CommandName": "Delete Quick Actions to the Incident Overview",
              "CommandParameters": {
                  "Incident number": "20241220-94"
              }
          }
      ]

   3. Click on the Test Command button to add the two quick actions.

5. Navigate to the incident through the Investigation Dashboard.

6. Click on the Add quick action button to add more quick actions.

   

7. Add the desired quick action.

   

   1. (Optional) Click the View Sample Data button to review the format for the “Quick actions” input parameter.

   2. Input the JSON array containing the ActionName, CommandName and CommandParameters fields for each object corresponding to a chosen command.

   3. Click on the Run Command button, then close the popup.

More examples

The following are examples of arbitrarily chosen commands that can be added as quick actions:

• Send Email

• Add to Global List

1. Click on the Add quick action button.

   

2. Paste the following code snippet (replace the incident number) for the Quick actions parameter:

   JSON

   [
       {
           "ActionName": "Send Email",
           "CommandName": "Send email"
       },
       {
           "ActionName": "Add to global list",
           "CommandName": "Add to Global List"
       }
   ]

3. Click on the Run Command button.

   

4. Close the popup, then click on the Overview tab to refresh and view the newly added quick actions.

   

Execution

---