All Apps and Add-ons

Administrator rights for Alert action?

Nephaaris
New Member

Hello everyone

I have a problem with the Splunk Adon "IBM QRadar SOAR Add-on for Splunk".
We were able to install the add-on successfully. When creating a new alert you can also select the alert action. However, the form for the individual fields for Qraddar is not displayed for me. However, it works for the Splunk team members. According to the Splunk team, the only difference between me and them is that they have administrator rights. Is it correct that the alert action can only be used with administrator rights?

Thank you

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...