Splunk Enterprise Security

Slack Webhook alert not showing as an Adaptive Response in ES

New Member

Having trouble getting the Slack Webhook Alert to show as an option as an adaptive response under a correlation search. Weirdly, it shows in my QA environment but not in production. This is Splunk 7.2 and ES 5.2. The alert action works fine as a normal Splunk alert. Any ideas where to look? I have added TA-slack-webhook-alert under the ES app import.

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!