Customized Actions

The Tenable Add-on for Splunk provides an option that you to manually call a customized action. You can call an action to make a REST API call for a specifc action.

To call a customized action:

  1. Open the Incident Review and search for events.

    The list of events appears.

  2. Do one of the following:

    • Expand the event to view the details.
    • Click drop-down list in the top right corner of the item.
  3. Select Run Adaptive Response Action.

    A list of the configured adaptive response actions appears.

Next steps:

  • You can view the Alert Action status in the Adaptive Responses section to verify they were executed successfully.