Splunk Enterprise Security

Custom adaptive response action not showing.

burakatabay
Path Finder

Hi Splunkers,

I need a custom adaptive response and ı read this documentation.
"https://dev.splunk.com/enterprise/docs/developapps/enterprisesecurity/adaptiveresponseframework/exam..."
I did what it says on this page.
Also I try add-on builder then resuit is same, Don't show any custom adaptive response on incident review page .
I also cannot include this app in any correlation search alert action.
My app name is TA-tck.
Splunk version 7.2.5.1
Splunk ES version 5.2.0

Also "supports_adhoc": true in alert_actions.conf file.
ı restarted splunk.

alt text

How I fix this, thank you for all.

0 Karma
Get Updates on the Splunk Community!

App Building 101 - Build Your First App!

WATCH RECORDING NOW   Tech Talk: App Dev Edition Splunk has tons of out-of-the-box functionality, and you’ve ...

Introducing support for Amazon Data Firehose in Splunk Edge Processor

We’re excited to announce a powerful update to Splunk Data Management with added support for Amazon Data ...

The Observability Round-Up: September 2024

What’s up Splunk Community! Welcome to the latest edition of the Observability Round-Up, a monthly series in ...