Splunk Enterprise Security
Highlighted

Splunk Enterprise Security: Is it possible to embed an Adaptive Response hyperlink into the Notable Event Next Steps?

Path Finder

I know that it is possible to embed an Adaptive Response hyperlink into the next steps section of Splunk Enterprise Security (ES), however I'm wondering if you can embed plain old hyperlinks to other Splunk dashboards and even external sites within the next steps. I've attempted several permutations of steps with hyperlinks and wasn't able to get any of them to work as I expected

According to the Splunk documentation here: http://docs.splunk.com/Documentation/ES/4.6.0/User/IncludedResponseActions#Create_a_notable_event it says that hyperlinks are supported but I'm thinking that's only relevant to Adaptive Response actions that have been added to your environment

0 Karma
Highlighted

Re: Splunk Enterprise Security: Is it possible to embed an Adaptive Response hyperlink into the Notable Event Next Steps?

Builder

"You can only type plain text and links to response actions"
Only links to adaptive response actions. Hyperlinks are not supported in next steps or the description field for notable events. Links included will be visible but not clickable.

View solution in original post

Highlighted

Re: Splunk Enterprise Security: Is it possible to embed an Adaptive Response hyperlink into the Notable Event Next Steps?

Communicator

One way to achieve your goal is to maybe have your "next steps" link implemented as a workflow action?

Cheers.

Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.