---
title: "Connecting Playbook Elements Knowledge Base Article | ThreatConnect"
slug: "connecting-playbook-elements"
description: "This article provides a brief description of how to connect Playbook elements in the Playbook Designer."
updated: 2023-05-12T21:07:59Z
published: 2023-05-12T21:07:59Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting Playbook Elements

Playbook elements must be connected in order to create a logical flow of execution. All [Triggers](https://knowledge.threatconnect.com/docs/adding-a-trigger) have a blue circle node. Continuing from the example in *[Adding a Trigger](https://knowledge.threatconnect.com/docs/adding-a-trigger)*, *[Adding an App](https://knowledge.threatconnect.com/docs/adding-an-app)*, and *[Adding an Operator](https://knowledge.threatconnect.com/docs/adding-an-operator)*, click the blue circle node on the Trigger and drag the line to connect the Trigger and the App (Figure 1).

![Figure 1_Connecting Playbook Elements_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%201_Connecting%20Playbook%20Elements_7.1.0.png)

All [Apps](https://knowledge.threatconnect.com/docs/adding-an-app) and almost all [Operators](https://knowledge.threatconnect.com/docs/adding-an-operator) have blue and orange nodes. When these nodes are connected to other Apps and Operators, the Playbook will follow the path(s) from the blue node if the execution of the App or Operator it starts from results in success. It will follow the path(s) from the orange node if the execution results in failure.

Connect the Trigger and all Apps, and Operators in the Playbook to create the desired logical flow of execution (Figure 2).

![Figure 2_Connecting Playbook Elements_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%202_Connecting%20Playbook%20Elements_7.1.0.png)

To delete a connection, click on its blue or orange arrow and then confirm the delete operation in the **Delete** window.

ImportantAs stated in the **Delete** window, deleting a connection between two Playbook elements may break downstream variable references.

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.*

20110-25 v.03.A