Splunk Enterprise Security

Custom Adaptive Response Invocations Result Manuel

Path Finder

I create own custom adaptive response action. This adhoc action is worked.
But, I don't use cim_action.py lib on my script.py . script is worked but invocation result not showing.
Also, My adaptive response action result not writing .

How can I do this without using cim_action.py ? OR Can I do it ?
For example ? I run my adhoc adaptive response and .

alt text

0 Karma


To my understanding, only Adaptive Actions (AR) written to work within the 'CIM modactions' framework will appear under the 'Adaptive Responses' pane of the incident review dashboard. You could use the Add-on builder (if not using already) to create your custom AR and that could address your need to view/list your AR

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...