Customized Actions
The Tenable Add-on for Splunk provides an option that allows you to call a customized action manually. You can call an action to make a REST API call for a specific action.
To call a customized action:
-
Open the Incident Review and search for events.
The list of events appears.
-
Do one of the following:
- Expand the event to view the details.
- Click drop-down list in the top-right corner of the item.
-
Select Run Adaptive Response Action.
A list of the configured adaptive response actions appears.
Next steps
- You can view the Alert Action status in the Adaptive Responses section to verify they were executed successfully.