September 26, 2026
ActionStack - Forms for SOAR
Provides role-aware forms and reliable event submission from Splunk Enterprise to Splunk SOAR through a native UI with workspace management.Built by Scott HortonSplunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2
Log in to rate this app
Over the last year or so as I install apps and build out playbooks in Splunk SOAR I find myself wanting to be able to trigger automation based off of input instead of an event in Enterprise Security or as an ad-hoc run from a Finding or Investigation. Ideas this could help with... You get asked to place a mailbox on legal hold and you already have SOAR connected and authorized to do this but you don't have an easy way to trigger it. You want to give detailed descriptions of playbooks that are triggered manually to your analysts before they run a playbook or maybe your playbook needs additional information before execution.
Log in to report this app listing.