Splunk Enterprise Security

Custom Adaptive Response Invocations Result Manuel

burakatabay
Path Finder

Hi,
I create own custom adaptive response action. This adhoc action is worked.
But, I don't use cim_action.py lib on my script.py . script is worked but invocation result not showing.
Also, My adaptive response action result not writing .

How can I do this without using cim_action.py ? OR Can I do it ?
For example ? I run my adhoc adaptive response and .

alt text

0 Karma

lakshman239
Influencer

To my understanding, only Adaptive Actions (AR) written to work within the 'CIM modactions' framework will appear under the 'Adaptive Responses' pane of the incident review dashboard. You could use the Add-on builder (if not using already) to create your custom AR and that could address your need to view/list your AR

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...