- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How do you create an Adaptive Response action using Python Script?
WillBryant
New Member
07-28-2023
01:30 PM
I'm trying to run a Python script as part of an Adaptive Response Action. In Splunk ES, I go to Enterprise Security > Configure > Content > Content Management > Correlation Search .
Under Correlation Search, I added Adaptive Response Actions and selected Run a Script (I was initially told to use Webhook; however I wasn’t able to pass arguments from code—just a parameter for an URL) placed a copy of the Python script that contain the POST request and some exception handling in $Splunk_Home/bin/scripts.
For the Trigger Condition, I selected custom as I wanted to launch the action on demand; however, I’m not sure what parameters to use for this. I tried to find documentation to no avail. Could someone please advise.
Thank you
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
meetmshah
Builder
07-31-2023
01:01 PM
