Roll back response integration version

Supported in:

Google secops SOAR

Note: This feature is covered by Pre-GA Offerings Terms of the Google Security Operations Service Specific Terms. Pre-GA features might have limited support, and changes to pre-GA features might not be compatible with other pre-GA versions. For more information, see the Google SecOps Technical Support Service guidelines and the Google SecOps Service Specific Terms.

This document explains how to roll back response integrations to a previously installed version. This is useful if a new version introduces unexpected behavior or if you need to revert custom code changes.

Note: This feature is not supported for custom or community integrations, or for customers in VPC-SC environments.

Roll back to a previous version

To roll back to a previously installed version, follow these steps:

1. Go to Content Hub and click the Response Integrations tab.
2. Select the required response integration.
3. Click Details.
4. In the side drawer, click the Versions tab.
5. Locate the Last Installed section and click Rollback.

Caution: A rollback reverts all content (standard code and custom modifications) to the state of the last installed version. Any custom work performed after that version was installed will be lost.

6. In the confirmation dialog, click Confirm.
7. Choose whether to override the existing ontology. For more information on managing ontologies, see Ontology override.
8. Click Confirm. The system uninstalls the current version and restores the previous version.

Important: You can only roll back to a version if it was installed after the Rollback feature was enabled for your instance. The system creates a snapshot during the upgrade process; if no snapshot exists for a previous version, the Rollback option won't be available.

Need more help? Get answers from Community members and Google SecOps professionals.