logo
  • Home
  • TheHive
  • Cortex
  • Cortex Neurons
  • Resources
Initializing search
    • Home
      • Overview
        • Installation Methods
          • System Requirements
          • Software Requirements
        • Package Repository
        • Install with Packages
        • One-Command Install
        • Deploy with Docker
        • Deploy on Kubernetes
        • Set Up a Cluster with Packages
          • About Licenses
          • Request a Community License
          • Activate or Update a License
          • Upgrade from Version 5.x
          • Upgrade from Version 4.x
          • Migration from Version 3.x
        • Cortex Integration
        • MISP Integration
        • Service Configuration
        • Database and Index Authentication
        • Database and Index SSL
        • Akka (Version 5.3 and Earlier)
        • Pekko (Version 5.4+)
        • Docker Entrypoint Settings
        • JVM SSL Trust
        • HTTPS via Reverse Proxy
        • Outbound Proxy Settings
        • Log Configuration
        • GDPR Compliance Feature
        • Cassandra Cluster Operations
        • Cassandra Security Operations
          • Cold vs. Hot Backups and Restores
              • Physical Server
              • Virtual Server
              • Docker Compose
              • Standalone Server
              • Cluster
              • Physical Server
              • Virtual Server
              • Docker Compose
              • Standalone Server
              • Cluster
          • Deprecation Notice
          • Switch to Manual Download and Installation
        • Index Management
          • Overview
          • Index Refresh Interval
          • JVM Memory
        • Troubleshooting
        • Monitoring
        • First Start
          • About Organizations
          • Organizations Sharing Rules
          • Create an Organization
          • Link an Organization
          • Lock an Organization
          • About User Accounts
          • Create a User Account
          • Manage User Accounts
          • Add or Remove An Existing User Account from an Organization
          • Modify the Default Organization for a User Account
          • Delete a User Account
          • Lock a User Account
          • Export a List of User Accounts
          • Customize Branding
            • About Licenses
            • Request a Community License
            • Activate or Update a License
            • About Cortex
            • Add a Cortex Server
            • Remove a Cortex Server
            • About MISP Integration
            • Connect a MISP Server
            • Delete a MISP Server Connection
            • About Email Intake Connectors
            • Connect a Mailbox
            • Manually Fetch Emails
            • Delete a Mailbox Connection
            • Configure Authentication
              • Local
              • Active Directory (AD)
              • LDAP
              • OAuth 2.0
              • SAML
              • OpenID
            • About SMTP
            • Configure an SMTP Server
            • About LDAP
            • Configure an LDAP Server
          • Add a Global Endpoint
            • About Profiles
            • Create a Profile
            • Add or Remove Permissions from a Profile
            • Delete a Profile
            • About Custom Fields
            • Create a Custom Field
            • Manage Custom Fields
            • Delete a Custom Field
            • Create an Observable Type
            • Set an Observable Type as Case-Insensitive
            • Delete an Observable Type
            • About Statuses
            • Create a Status
            • Change a Status Visibility
            • Change a Color Visibility
            • Delete a Status
            • About Analyzer Templates
            • Import Analyzer Templates
            • Customize an Analyzer Template
            • About Taxonomies
            • Add a Custom Taxonomy
            • Update MISP Taxonomies
            • Activate or Deactivate a Taxonomy
            • Activate or Deactivate a Taxonomy Tag
            • Delete a Taxonomy
            • About TTPs
            • Add a Catalog
            • Update a Catalog
            • Remove a Catalog
            • View Techniques
          • About TheHive Portal
          • Tutorial: Set Up TheHive Portal Access
          • Fail2ban Configuration
          • Splunk Integration Guide
          • Manage Your Account Settings
          • Manage Your Password
          • Change Your Account Theme
          • View Your Account Profile and Permissions
          • Switch Between Organizations
          • Log Out of Your Account
            • About User Accounts
            • Create a User Account
            • Manage User Accounts
            • Add or Remove An Existing User Account from an Organization
            • Lock a User Account
            • Export a List of User Accounts
              • About Case Templates
              • Create a Case Template
              • Delete a Case Template
              • Export or Import a Case Template
              • About Page Templates
              • Create a Page Template
              • Delete a Page Template
              • Export a Page Template
              • Import a Page Template
              • About Case Report Templates
              • Widgets
              • Create a Case Report Template
              • Add or Remove Widgets
              • Delete a Case Report Template
            • About Custom Tags
            • Change the Color of a Custom Tag
            • Rename a Custom Tag
            • Delete a Custom Tag
            • View Custom Tag Statistics
            • UI Configuration Settings
            • Prevent Users from Creating Empty Cases
            • Prevent Users from Merging Alerts into Closed Cases
            • Select Similar Cases and Alerts Filters
            • Pause Dashboard Refresh
            • Remove the All Periods Option in a Dashboard
            • Hide KPIs
            • Allow Custom Link Schemes
            • About Notifications
            • Create a Notification
            • Turn Off a Notification
            • Delete a Notification
            • Variable Usage Examples
              • EmailToUser
              • EmailToAddr
              • HttpRequest
              • Mattermost
              • Slack
              • Teams
              • Webhook
              • Kafka
              • Redis
              • RunAnalyzer
              • RunResponder
              • Function
              • Write a FilteredEvent Trigger
              • Operators
              • About Endpoints
              • Add a Local HttpRequest Endpoint
              • Add a Local Mattermost Endpoint
              • Add a Local Slack Endpoint
              • Add a Local Teams Endpoint
              • Add a Local Webhook Endpoint
            • Configure SLA Rules
            • About Functions
            • Create a Function
            • Delete a Function
            • Invoke a Function
            • Functions Objects
            • About Alert Feeders
            • Create an Alert Feeder
            • Turn Off an Alert Feeder
            • Delete an Alert Feeder
            • About Attachments
            • Add an Attachment
            • Remove an Attachment
            • Download an Attachment
            • Share an Attachment
          • Tutorial: Automate Tracking of Pending Alerts
          • Tutorial: Automate Monitoring of Tasks Approaching Their Due Date
          • Tutorial: Automate Extraction of Observables from Emails
            • About Alerts
              • Find an Alert
              • Overview of Search Methods for Alerts
            • Create a Case from an Alert
            • Add an Alert to an Existing Case
            • Unlink an Alert and a Case
            • Change an Alert Status
            • Change Classification Settings
            • Enrich Alert Details
            • Ignore Alert Updates from MISP
            • Start Working on an Alert
            • Assign an Alert
            • Run a Function on a Case or Alert
            • Run Responders and Review Reports for an Alert
            • Find Similar Alerts or Cases
            • Export a List of Alerts
              • About Observables
              • Add an Observable
              • Update the Status of an Observable
              • Edit Multiple Observables
              • Exclude an Observable From Similarity Checks
              • Delete an Observable
              • Find an Observable
              • Find a Job
              • Share an Observable with Internal Organizations
              • Export Data from an Observable
              • Pin an Observable
              • Run Analyzers and Review Reports for an Observable
              • Import Observables from Analyzer Reports
              • Run Responders and Review Reports for an Observable
              • About TTPs
              • Export TTPs
              • About Attachments
              • Add an Attachment
              • Remove an Attachment
              • Download an Attachment
              • Share an Attachment
              • About Tags
              • Add or Remove Tags
              • Add Custom Fields
              • Remove Custom Fields
              • Enter Values in Custom Fields
            • About Audit Logs
              • Comment on Alerts
              • Share a Comment
              • Find a Comment
            • Close an Alert
            • Reopen an Alert
            • About Cases
              • Find a Case
              • Overview of Search Methods for Cases
            • Create a Case
            • Apply a Case Template
            • Find Similar Alerts or Cases
              • About Observables
              • Add an Observable
              • Update the Status of an Observable
              • Edit Multiple Observables
              • Exclude an Observable From Similarity Checks
              • Delete an Observable
              • Find an Observable
              • Find a Job
              • Share an Observable with Internal Organizations
              • Export Data from an Observable
              • Pin an Observable
              • Run Analyzers and Review Reports for an Observable
              • Import Observables from Analyzer Reports
              • Run Responders and Review Reports for an Observable
              • Add Custom Fields
              • Remove Custom Fields
              • Enter Values in Custom Fields
              • About Tags
              • Add or Remove Tags
              • About TTPs
              • Add TTPs
              • Export TTPs
              • Remove TTPs
              • About Attachments
              • Add an Attachment
              • Remove an Attachment
              • Download an Attachment
              • Share an Attachment
              • Remove External User Access to an Attachment
              • Add a Link to a Case
              • Remove a Link from a Case
              • View Links in a Case
              • View Alerts Linked to a Case
              • Unlink an Alert and a Case
              • Comment on Cases
              • Share a Comment
              • Control Comment Access for External Users
              • Find a Comment
            • Change a Case Status
            • Change Classification Settings
            • Flag a Case
            • Add Tasks to a Case
            • Merge Cases
            • Run a Function on a Case or Alert
            • Run Responders and Review Reports for a Case
            • Close a Case
            • Reopen a Case
            • Delete a Case
              • Share a Case with Internal Organizations
              • Share a Case with External Users
              • Revoke Case Access for External Users
              • Restrict Case Visibility
              • Restore Case Visibility
              • About Case Timelines
              • Add a Custom Event
              • View a Case Timeline
              • Export a Case Timeline
              • Delete a Case Timeline
              • Export a List of Cases
              • Export an Archived Case
              • Export a Case to MISP
              • About Case Pages
              • Create a Page
              • Delete a Page
              • Share a Page
              • View a Page
              • Find a Page
              • About Case Reports
              • Save and Download a Case Report
            • About Audit Logs
              • About Tasks
              • Create a Task
              • Start a Task
              • Change a Task Status
              • Manage Tasks
              • Export a List of Tasks
              • Delete a Task
                • Find a Task
                • Overview of Search Methods for Tasks
              • Run Responders and Review Reports for a Task
              • Share a Task with Internal Organizations
              • Close a Task
              • About Task Logs
              • Create a Task Log
              • Delete a Task Log
              • Find a Task Log
              • Run Responders and Review Reports for a Task Log
            • About Dashboards
            • Widgets
            • Create a Dashboard
            • Add or Remove Widgets
            • Delete a Dashboard
            • Change Visibility of a Dashboard
            • Adjust Dashboard Refresh Frequency
            • Set a Dashboard Display Period
            • Export or Import a Dashboard
            • Download a Dashboard
          • Preview vs. Detail View
          • Filtering and Sorting
            • About Views
            • Create a Custom View
            • Update a Custom View
            • Rename a Custom View
            • Delete a Custom View
            • Change a Custom View Visibility
          • Autorefresh
          • Statistics
          • Live Feed
          • Tutorial: Automate Tracking of Pending Alerts
          • Tutorial: Automate Monitoring of Tasks Approaching Their Due Date
          • About the Knowledge Base
          • Create a Page
          • Delete a Page
          • Share a Page
          • View a Page
          • Find a Page
          • KPIs
          • Measure Case Management Performance
          • Measure Alert Management Performance
          • Measure Task Management Performance
          • About SLA Management
          • Monitor SLA
          • Configure SLA Notifications
        • Flavored Markdown Syntax
        • Date Field Definitions
        • Activate Your Account
        • Glossary
        • Find a Case
        • Create a Case
        • Post a Comment
        • Update a Comment
        • Delete a Comment
        • Upload an Attachment
        • Add an Observable
          • Manage Your Account Settings
          • Manage Your Password
          • Change Your Account Theme
          • Switch Between Organizations
          • Log Out of Your Account
        • API Documentation
        • Python Client
        • Go Client
      • MCP Server
        • Release Versioning and Maintenance Policy
        • Release Notes for Version 5.8
        • Release Notes for Version 5.7
        • Release Notes for Version 5.6
        • Release Notes for Version 5.5
        • Release Notes for Version 5.4
        • Release Notes for Version 5.3
        • Release Notes for Version 5.2
        • Release Notes for Version 5.1
        • Release Notes for Version 5.0
      • Home
        • Cortex Installation Methods
          • System Requirements
          • Software Requirements
          • Package Repository
          • Install with Packages
          • One-Command Install
          • Run with Docker
          • Deploy on Kubernetes
          • Authentication
          • Secret Key
          • Database Configuration
          • Analyzers & Responders
          • Proxy Settings
          • Docker Parameters
          • SSL Configuration
          • Advanced Configuration
        • First start
        • User roles
        • Backup & Restore
        • Analyzers/Responders input and output
        • Upgrade to Cortex 3.1
        • Upgrade to Cortex 4.1
          • Deprecation Notice
          • Switch to Manual Download and Installation
        • API Guide
        • How to create an Analyzer
        • How to create a Responder
    • Cortex Neurons
      • Resources
      • TheHive Templates
        • VM Demo Environment
        • Docker Demo Environment
          • Main Features
          • Deploy TheHive AMI
          • Deploy Cortex AMI
          • AWS sample code
          • Create and manage the SecOps VPC
          • TheHive v5 and Cortex within a SecOps VPC
          • Main Features
          • Deploy TheHive Azure image
          • Deploy Cortex Azure image
          • Azure sample code
          • Creating a new SecOps Virtual Network
          • Deploying TheHive v5 and Cortex with Terraform
          • Upgrading your Azure instances
          • TheHive4py
          • TheHive4go
          • Cortex4py
          • Cortexutils
      • Security and Data Protection

    Manual trigger workflow editor flow

    Manual trigger from the workflow editor

    You can manually run a workflow from the workflow editor even without configuring any triggers.

    StrangeBee
    Empowering incident responders worldwide
    Company
    About usServicesContact us
    Products
    Request a demoTry TheHive On-premTry TheHive Cloud Platform SaaS
    Resources
    BlogSuccess storiesThird-party software licenses
    AICPA SOC certification
    Copyright 2025 StrangeBee. All rights reserved.