A user wants to create a workflow action that will retrieve a specific field value from an event and run a search in a new browser window
in the user's Splunk instance. What kind of workflow action should they create?

Question

A user wants to create a workflow action that will retrieve a specific field value from an event and run a search in a new browser window

in the user's Splunk instance. What kind of workflow action should they create?

David Aghaegbuna · Accepted Answer

A Search workflow action, because the user is running a new search with a specific field value from an event returned in the user's search.

David Aghaegbuna · Answer

A Run workflow action, because the user is running a new search with a specific field value from an event returned in the user's search.

David Aghaegbuna · Answer

A POST workflow action, because the search is being sent to the user's current Splunk instance.

David Aghaegbuna · Answer

A GET workflow action, because a field value needs to be retrieved from the events returned in the user's search.

List of questions