Hi @g_cremin I believe "actions" should be an array of actions, not a dict? This might be affecting things. ...
"actions": [
{
"action":"test_connectivity",
"identifier": "tes...
See more...
Hi @g_cremin I believe "actions" should be an array of actions, not a dict? This might be affecting things. ...
"actions": [
{
"action":"test_connectivity",
"identifier": "test_connectivity",
"description": "Tests connectivity to Wazuh",
"type": "test",
"read_only": true,
"parameters": [],
"output": []
}
],
... For more detail on the app.json schema check out https://docs.splunk.com/Documentation/SOAR/current/DevelopApps/Metadata Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing