Knowledge Management

After creating a workflow action, why don't I see any options for workflow once I search for some logs?

benabraham
New Member

Team,

Work flow action is not working in Splunk. I have created a workflow based on the documentation, but I didn't see any options for workflow once I search for some logs. How could this be? Do I need to restart some services to get this workflow working?

0 Karma

Sanjai676
Path Finder

Need a restart for the changes to reflect.

timpacl
Path Finder

I experienced a similar issue, In my case I set "Apply only to the following fields" and there was a typo in the field I entered, so no events had the workflow step. Since you can enter any field name you wish and Splunk does not save most fields at index time, the typo might have been an actual field in some unique record type so Splunk did not error when I saved the workflow. I fixed the typo and it became intermittent since not all events contained the field I selected. Records without that field didn't have the new workflow,

0 Karma

stephanefotso
Motivator

Hello! Are you sure you read the adequate document . Read here: http://docs.splunk.com/Documentation/Splunk/6.2.3/Knowledge/CreateworkflowactionsinSplunkWeb

Thanks

SGF
0 Karma
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...