All Apps and Add-ons

Administrator rights for Alert action?

Nephaaris
New Member

Hello everyone

I have a problem with the Splunk Adon "IBM QRadar SOAR Add-on for Splunk".
We were able to install the add-on successfully. When creating a new alert you can also select the alert action. However, the form for the individual fields for Qraddar is not displayed for me. However, it works for the Splunk team members. According to the Splunk team, the only difference between me and them is that they have administrator rights. Is it correct that the alert action can only be used with administrator rights?

Thank you

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...