Creating workflow actions

Workflow actions allow us to create custom actions based on the values in search results. The two supported actions either run a search or link to a URL.

Running a new search using values from an event

To build a workflow action, navigate to Manager | Fields | Workflow actions and click on New. You are presented with this form:

Running a new search using values from an event

Let's walk through the following fields:

  • Destination app: This is the app where the workflow action definition will live.
  • Name: This is the name used in configuration files. This name cannot contain spaces, but underscores are fine.
  • Label: This is what will appear in the menu. It can contain variables. ...

Get Implementing Splunk now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.