Skip to main content

Assign Active Incidents to Next Shift

This Playbook is part of the Shift Management - Assign to Next Shift Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

This playbook reassigns Active Incidents to the current users on call, requires shift management to be setup. Can be run as a job a few minutes after the scheduled shift change time.

Update the playbook input with a different search query if required. Will also branch if there are no Incidents that match the query, and no users on call.

Search results are the default 100 Incidents returned by the query.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


This playbook does not use any integrations.


  • SearchIncidentsV2
  • AssignToNextShift


  • closeInvestigation
  • getUsers

Playbook Inputs#

NameDescriptionDefault ValueRequired
IncidentSearchQueryQuery for the Incidents to reassign. Incidents need to be active for this to work, it will not reassign pending Incidents.status:Active -category:jobOptional

Playbook Outputs#

There are no outputs for this playbook.