Splunk Enterprise Security

Extracting Next Steps in Splunk ES Notables

New Member

Hey All,

I am still new to Splunk so apology for my ignorance, is there a way to extract "Next Steps" under Adaptive response to like a table or just plain csv for all my noteable events? I been reading up on REST but I am not sure if it's possible. Please let me know.


0 Karma