How do you create an Adaptive Response action using Python Script?

WillBryant — Fri, 28 Jul 2023 20:30:53 GMT

I'm trying to run a Python script as part of an Adaptive Response Action. In Splunk ES, I go to Enterprise Security > Configure > Content > Content Management > Correlation Search .
Under Correlation Search, I added Adaptive Response Actions and selected Run a Script (I was initially told to use Webhook; however I wasn’t able to pass arguments from code—just a parameter for an URL) placed a copy of the Python script that contain the POST request and some exception handling in $Splunk_Home/bin/scripts.

For the Trigger Condition, I selected custom as I wanted to launch the action on demand; however, I’m not sure what parameters to use for this. I tried to find documentation to no avail. Could someone please advise.

Thank you

topic Re: How do you create an Adaptive Response action using Python Script? in Splunk Enterprise Security

How do you create an Adaptive Response action using Python Script?

Re: How do you create an Adaptive Response action using Python Script?