Hi @ineedafleeb, It is possible ! And quite simple if you can code a bit. All you have to do is build an advanced command, you can learn more about this here : http://dev.splunk.com/view/python-sdk/SP-CAAAEU2 Instead of building a command that will run on the search results just build one that takes an IP as an input and then send it off to your IPS/Firewall to have the protocol, port or IP blocked. Feel free to share your code once you're done if you need help reviewing or improving it. Cheers, David ... View more