To create a GET workflow action in Splunk, you need to provide the following information:
✅ A. A name for the workflow action.
✅ B. A URI where the user will be directed at search time.
✅ C. A label that will appear in the Event Action menu at search time.
❌ D. A name for the URI where the user will be directed at search time. (This is not required—just the actual URI is needed.)
✅ Correct answers:
A, B, C
Let me know if you want a quick walkthrough of how to configure one in Splunk Web!
ABC: pg 219 F2
"a URI where the user will be directed to at search time, and a label that will appear in the Event Action menu, the destination URL and a descriptive name for the action"
ABC is the correct answer. Tested: Settings -> Fields » Workflow actions » Add new
mandatory fields (*):
- Name (Enter a unique name without spaces or special characters. This is used for identifying your workflow action later on within Splunk Settings.),
- Label (Enter the label that appears for this action. Optionally, incorporate a field's value by enclosing the field name in dollar signs, e.g. 'Search for ticket number : $ticketnum$'.),
- Action Type (link, search),
- URI (Enter the location to link to. Optionally, specify fields by enclosing the field name in dollar signs, e.g. http://www.google.com/search?q=$host$.).
A. A name for the workflow action.
B. A URI where the user will be directed at search time.
C. A label that will appear in the Event Action menu at search time.
When you are adding a new Workflow action, you can see that the required fields (marked with asterisk) are: Name, Label, Action Type (link/search) and URI.
"In URI provide a URI for the location of the external resource that you want to send your field values to." but it never mentiones a searchtime: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/SetupaGETworkflowaction
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
oksey
Highly Voted 4 years, 10 months agolance_grown
1 year, 8 months agocarnage1970
Highly Voted 2 years, 11 months ago2dd1c50
Most Recent 2 weeks, 6 days agovoiddraco
10 months, 1 week agoANki_24
1 year, 6 months agojb844
1 year, 7 months agomohamedhaleem
1 year, 9 months agoJoAsiaGje
1 year, 9 months agoDree_Dogg
1 year, 11 months agoHuslayer
1 year, 12 months agoSam1289
2 years agoasarali
2 years, 1 month agoDoflamingo
2 years agoSasnycoN
3 years, 7 months agoSasnycoN
3 years, 7 months agoNLotus
3 years, 10 months agoLalithadevi
4 years, 3 months agoGlat
4 years, 7 months agonirmaljohnson
4 years, 8 months agoSasnycoN
3 years, 7 months ago