https://community.splunk.com/t5/Splunk-Enterprise-Security/Trigger-an-action-manually/m-p/518873#M9252 <P>One option would be to create a custom adaptive action (AR), which can be manually invoked by the responder. [ Your AR code would need to then collect the required information from the correlation search/search events and send/email as needed]</P> Thu, 10 Sep 2020 12:43:47 GMT lakshman239 2020-09-10T12:43:47Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Trigger-an-action-manually/m-p/517022#M9207 <P>I need an action for an incident responder to send a selected event's data via email. I can define notable actions, but they will be triggered automatically when a notable is created. How can I do this manually?</P> Mon, 31 Aug 2020 13:11:30 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Trigger-an-action-manually/m-p/517022#M9207 alekwisnia 2020-08-31T13:11:30Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Trigger-an-action-manually/m-p/518873#M9252 <P>One option would be to create a custom adaptive action (AR), which can be manually invoked by the responder. [ Your AR code would need to then collect the required information from the correlation search/search events and send/email as needed]</P> Thu, 10 Sep 2020 12:43:47 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Trigger-an-action-manually/m-p/518873#M9252 lakshman239 2020-09-10T12:43:47Z