Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Is it expected : Workflow action visible under action for notable events on incident review on enterprise security

$
0
0
1. I had a add-on created with preffix TA-XYZ(having Adaptive response action) and one app say "ABC", which has workflow action defined. 2. When I merged TA-XYZ code to ABC I am now seeing the workflow actions under actions for notable events in incident review page as well. 3. I don't want my workflow actions to be visible under incident review on enterprise security. Is there any way to disable them on incident review ? Note - While merging I renamed ABC to TA-ABC as i was not able to see Adaptive response action created in the merged code and after renaming ABC to TA-ABC I was able to see my adaptive response action.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>