How do I use this Adaptive Response framework? What are its capabilities?

[prabhasgupte]

I just came across this app. And I want to try that out. How do I use it?

I have installed this framework, and have also installed AR-Log app. I went through "Getting started" pages and all, but haven't got any clear idea about how should I use this framework.

What are the capabilities of this framework?

[rpille_splunk]

Hi Prabhasgupte,

The Adaptive Response framework is now generally available in Splunk Enterprise Security version 4.5.0. There were some prototype and some early features that released for early tinkering, but that is out of date now.

Please refer to the docs here instead: http://dev.splunk.com/view/enterprise-security/SP-CAAAFBE

Thanks,

~ Robin

[tkiss]

Link is broken?

[rpille_splunk]

Sorry about that -- I had accidentally put a period at the end of it. Fixed now.

[tkiss]

works great, appreciated!