Security

How to add splunk es adaptive response action notable event?

abi2023
Path Finder

I am try add to my notable event in correlation search next step analyst need to take. I am see some issue.

when I list next step action for analyst to take. I am getting my my next step action getting truncated in notable event in incident review page.

step 1 and step 2 are in same line even after I separate them by line.

Tags (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@abi2023 - There may be limit of number of characters for "Next Steps" on the Incident Review page.

How long is your "Next Steps" text?

 

I hope this helps!!!

Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...