Having trouble getting the Slack Webhook Alert to show as an option as an adaptive response under a correlation search. Weirdly, it shows in my QA environment but not in production. This is Splunk 7.2 and ES 5.2. The alert action works fine as a normal Splunk alert. Any ideas where to look? I have added TA-slack-webhook-alert under the ES app import.
