I'm trying to run a Python script as part of an Adaptive Response Action. In Splunk ES, I go to Enterprise Security > Configure > Content > Content Management > Correlation Search .
Under Correlation Search, I added Adaptive Response Actions and selected Run a Script (I was initially told to use Webhook; however I wasn’t able to pass arguments from code—just a parameter for an URL) placed a copy of the Python script that contain the POST request and some exception handling in $Splunk_Home/bin/scripts.
For the Trigger Condition, I selected custom as I wanted to launch the action on demand; however, I’m not sure what parameters to use for this. I tried to find documentation to no avail. Could someone please advise.
Thank you
