Viewing Workflows Run History

The Run History page allows you to view the results of Workflow runs, either for all Workflows or a specific one.

To view all runs of all Workflows

• On the Workflows page, click Run History in the upper-right corner. The Run History page displays a table with details of the runs for all the Workflows defined in the system.

To view the runs of a single Workflow

1. In the Workflows table, click the desired Workflow.
2. On the Workflow configuration summary page that opens, click View Runs in the upper-right corner. The Run History - Workflows tab opens, displaying the runs of the selected workflow. The Workflow Name appears in the filter dropdown. You can select other Workflows from this dropdown to view their run history as well.
   

The Run History Page

The Run History page provides a list of all Workflow runs (or those of a selected Workflow), allowing you to investigate the results of each run.

The Run History page consists of the following main elements:

• Search/Filter bar
• Run History table
• Actions (Terminate Task)
• Total (<# of runs performed>) - Increments by 1 each time a Workflow is triggered.

Run History Table

The Run History table displays a list of Workflow runs, with one row representing each run. The Run History is updated each time a Workflow is triggered by an Event or Action.

The Run History table includes the following fields, by default, for each Workflow, and where relevant, for each element within the Workflow:

• Structure - Displays icons representing the sequence of events and actions that the asset traversed within the workflow run.

• Run - The ID number of the run. Begins with WF, e.g., WF Run 70.

• Workflow Name – The default or assigned workflow name.

• Status - The status of the latest run that originated from this workflow. For example, if an Add Tag to Asset action is currently running in the workflow, the current status of this action is displayed. Available statuses are:

  • Awaiting - Workflow is waiting for an event or action to proceed (e.g., waiting for an external system response or a scheduled time). The Workflow changes to this status after a certain amount of time that the run is In Progress and doesn't automatically move to another status.
  • Completed - Shows Workflow runs where all events and actions finished without errors.
  • Delayed - Workflow reached a Delay node and is paused for the configured delay time.
  • Failed - All actions failed.
  • In Progress - Workflow run is in progress.
  • Terminated - Workflow run terminated due to the user manually terminating the Workflow run.
  • Timed Out (in red) - An Event configured with a Timeout but without a defined Timeout condition, has reached its timeout limit. In this case, the Workflow terminates due to the event timeout.

• Trigger – The icon and name of the event or action that triggered this workflow.

• Triggered On – This can be one of the following:

  • The asset on which the event or action was triggered.
  • No assets - Workflow was triggered by one of the following:
    • An action whose query (built with the Query Wizard) resolved no assets.
    • An event that resolved no assets. Learn about how triggering Events with no assets trigger Workflows.

• Last reported activity - The date and time (in UTC time) that the latest node completed running in the Workflow. Updated each time a node is completed.

• Start Date – The date and time (in UTC time) that an event or action triggered this Workflow.

• End Date – The end date and time (in UTC time) of the entire Workflow run. This field displays a value only when the Workflow run has completed.

Viewing Detailed Run Information and Component Configuration

• On the Run History page, click any row (representing a Workflow run) to open its Run drawer.

• The Run drawer displays tabs for each component (Event or Action) that the asset encountered during the Workflow run.

• Clicking a tab shows detailed information about that specific component's run within the selected Workflow run, along with its configuration. Learn more on how Event fields are displayed in the run drawer, including parsed string fields.

• Click the Go to Workflow icon in the header of the Run drawer to open the detailed configuration of the Workflow.

The following Run Drawer presents the run details and configuration of the Microsoft Teams - Send Message action that triggered the workflow. You can click the other tabs to present the Teams Message Response event or Axonius - Add Tag to Assets Enforcement Action run details and configuration.

At the top of the drawer are tabs of the events and actions that ran in the workflow. For each event/action, the following information is shown:

• Started, Ended - Start and end date and time of the event/action run.

• Type - Whether the workflow component is an Event or Action.

• Status -

  • Event status can be any of the following:
    • Awaiting - Status of the last event of a run that is in Awaiting status.
    • Timed Out (with gray shading) - The last event of a run, configured with Timeout but without a Timeout Condition, has reached its timeout limit.
    • Completed - Status of the event if the run is not Awaiting or Timed Out.
  • Action status can be any of the following:
    • Success - The action succeeded.
    • Failure - The action failed.

• Affected Asset - The asset affected by the run. Clicking the link opens the asset profile page.

If the running of the event/action results in an error, the Run Error is displayed in the drawer.

Viewing Run History of an Asset

• From the Run drawer, click the Affected Asset link to open the Asset Profile page for that asset.

• On the Asset Profile page that opens, click the Enforcement Runs tab to view a history of all Enforcement Center activities related to this asset, including Enforcement Set and Workflow runs. To learn more, see Asset Profile Page.

Filtering the Run History Table

You can filter the Run History table by entering criteria in the Search bar or by selecting options from the following filters:

• Search - Enter text to search across relevant text fields in the table.
• Workflow Name - Filters by Workflow name.
• Event Type - Filters by Events in the Workflow.
• Action Type - Filters by Enforcement Actions in the Workflow.
• Status - Filters by the current status of the run.
  • Awaiting - Shows all Workflow runs waiting for an event or action.
  • Completed - Shows all Workflow runs where all events and actions finished without errors.
  • Delayed - Shows all Workflow runs that are currently paused (on Delay node).
  • Failed - Shows all Workflow runs where all Actions failed.
  • In Progress - Shows all Workflows that are still running.
  • Terminated - Shows a list of all Workflows whose runs were manually terminated.
  • Timed Out - Shows a list of all Workflows whose run terminated due to event timeout.
• From, To - The Workflows that were run in the specified period of time.
  
  • Click From and select the date and optionally the time (right pane) from which to display results. Repeat for To and then click Ok.
  • Both From and To dates must be filled in and be earlier than or on the current date.
  • Click the arrows to the left/right of the Month/Year header to open the previous/next month's or year's calendar page.
  • To filter results only for a specific date, select the same date twice.
    
  
  
  
  
  You can click the following to perform quick actions on filters:

  • Select All - Selects all options in a specific filter.
  • Clear All - Clears all selections in a specific filter. 
  • Reset - Clears all filters and displays the entire table.

The total number of Workflow runs that match the search criteria is displayed on the top left side of the Run History table just under the Filter bar. When no search criteria is selected, the total results represent the total number of runs.