Which of the following examples would use a POST workflow action?

The correct answer is B. Use the field values in an HTTP error event to create a new ticket in an external system. Splunk workflow actions come in three types: GET (open a URL in a browser), POST (submit form data to an external URL), and Search (run another Splunk search). Creating a new ticket in an external system (like Jira or ServiceNow) requires submitting data via an HTTP POST…

Creating and Using Workflow Actions

Question

Options

APerform an external IP lookup based on a domain value found in events.
BUse the field values in an HTTP error event to create a new ticket in an external system.
CLaunch secondary Splunk searches that use one or more field values from selected events.
DOpen a web browser to look up an HTTP status code.

How the community answered

(28 responses)

A
7% (2)
B
89% (25)
C
4% (1)

Explanation

Splunk workflow actions come in three types: GET (open a URL in a browser), POST (submit form data to an external URL), and Search (run another Splunk search). Creating a new ticket in an external system (like Jira or ServiceNow) requires submitting data via an HTTP POST request, making option B correct. Option A (external IP lookup) is a GET action that opens a URL. Option C (launching secondary searches) is a Search workflow action. Option D (opening a browser to look up a status code) is a GET action.

Topics

#Workflow actions#POST workflow#External integration#Event actions

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice