https://community.splunk.com/t5/Splunk-Enterprise-Security/Adaptive-Response-Log-Event/m-p/497178#M8642 <P>Hello all,</P> <P>I'm using a Correlation Search to create a Log Event as below:<BR /> hxxps://docs.splunk.com/Documentation/Splunk/7.2.6/Alert/LogEvents</P> <P>Whilst it works, I can't figure out how to get more information into the "Event text" other than free text. I would like to include some data from the original correlation search.</P> <P>The idea is it would trigger on a port scanning correlation for example and create "Port scan from x.x.x.x". Then there would be another search that picks up that event and correlates it with vuln scanning, etc.</P> Tue, 28 Jan 2020 16:16:28 GMT Zerophage 2020-01-28T16:16:28Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Adaptive-Response-Log-Event/m-p/497178#M8642 <P>Hello all,</P> <P>I'm using a Correlation Search to create a Log Event as below:<BR /> hxxps://docs.splunk.com/Documentation/Splunk/7.2.6/Alert/LogEvents</P> <P>Whilst it works, I can't figure out how to get more information into the "Event text" other than free text. I would like to include some data from the original correlation search.</P> <P>The idea is it would trigger on a port scanning correlation for example and create "Port scan from x.x.x.x". Then there would be another search that picks up that event and correlates it with vuln scanning, etc.</P> Tue, 28 Jan 2020 16:16:28 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Adaptive-Response-Log-Event/m-p/497178#M8642 Zerophage 2020-01-28T16:16:28Z