Splunk Operational Intelligence Cookbook - Third Edition

How to do it...

Follow the steps in this recipe to create a workflow action ARIN search for a given IP address:

1. Log in to your Splunk server.
2. Select the Operational Intelligence application.
3. Click on the Settings menu.
4. Click on the Fields menu option:

5. Click on the Workflow actions link:

6. Click on New Workflow Action.
7. Ensure that the Destination app is the operational_intelligence app.

8. Enter ARIN_Lookup in the Name field. This name must not contain any spaces or special characters. It will be used as the internal name of the action and ...