https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-invoke-adhoc-queries/m-p/435115#M5740 <P>After installing and configuring this application I am unable to get the adaptive response to run. I continue to get teh error as follows:<BR /> " "Shodan IP Lookup" could not be dispatched: ModularActionException: Invalid parameter for ad hoc modular action."</P> <P>Is there a format which is needed when invoking this adaptive response directly from the event and manually placing the IP into the IP lookup field? Thank you. </P> Wed, 19 Jun 2019 18:53:51 GMT pcyr 2019-06-19T18:53:51Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-invoke-adhoc-queries/m-p/435115#M5740 <P>After installing and configuring this application I am unable to get the adaptive response to run. I continue to get teh error as follows:<BR /> " "Shodan IP Lookup" could not be dispatched: ModularActionException: Invalid parameter for ad hoc modular action."</P> <P>Is there a format which is needed when invoking this adaptive response directly from the event and manually placing the IP into the IP lookup field? Thank you. </P> Wed, 19 Jun 2019 18:53:51 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-invoke-adhoc-queries/m-p/435115#M5740 pcyr 2019-06-19T18:53:51Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-invoke-adhoc-queries/m-p/435116#M5741 <P>Hey pcyr. Do you have Splunk Add-on for CIM installed?<BR /> Another got you is that you need to go into the index settings and select an index and press save</P> Wed, 19 Jun 2019 23:53:34 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-invoke-adhoc-queries/m-p/435116#M5741 dperre_splunk 2019-06-19T23:53:34Z