Creating workflow actions

Workflow actions allow us to create custom actions based on the values in search results. The two supported actions either run a search or link to a URL.

Running a new search using values from an event

To build a workflow action, navigate to Manager | Fields | Workflow actions and click on New. You are presented with this form:

Running a new search using values from an event

Let's walk through the following fields:

  • Destination app: This is the app where the workflow action definition will live.
  • Name: This is the name used in configuration files. This name cannot contain spaces, but underscores are fine.
  • Label: This is what will appear in the menu. It can contain variables. ...

Get Implementing Splunk: Big Data Reporting and Development for Operational Intelligence now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.