Splunk Enterprise Security

Why do I have error with ForeScout Adaptative Response Add-on about retrieve alert actions?

paola92
Explorer

I install Forescout App and Add-ons for Splunk Enterprise Security but I receive a alert and the active alerts is not available.

alt text

0 Karma

Azeemering
Builder

Hi,

Like I said in my previous answer you only need the Forescout Adaptive Response Add-on if you have Splunk Enterprise Security installed. If you do not have Splunk ES then you will not have the alert actions. There is no point installing the add-on without ES according to my knowledge.

0 Karma

paola92
Explorer

Hi,

I have ES and Forescout Adaptive Response Add-on but I have not the alert actions and shows the alert.

Vijeta
Influencer

@paola92 Any update to this, even I am getting the same error message.

0 Karma

gsales
New Member

Me too. I also encounter this problem. Hope this will be solved soon because our client is also looking for their CounterACT.

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...