Hi Splunkers,
I need a custom adaptive response and ı read this documentation.
"https://dev.splunk.com/enterprise/docs/developapps/enterprisesecurity/adaptiveresponseframework/exam..."
I did what it says on this page.
Also I try add-on builder then resuit is same, Don't show any custom adaptive response on incident review page .
I also cannot include this app in any correlation search alert action.
My app name is TA-tck.
Splunk version 7.2.5.1
Splunk ES version 5.2.0
Also "supports_adhoc": true in alert_actions.conf file.
ı restarted splunk.
How I fix this, thank you for all.
