When you click the Action History option in the Quick Actions window, the Quick Action History window displays the historical details of the Response Actions executed for that specific meta value.
The following table describes the columns in the Quick Action History view.
| Columns | Description |
|---|---|
| Executed On | Displays the date and time when the Response Action was last executed. For example: 12/11/2023 05:06am |
| Name | Displays the name of all the Response Actions executed. |
| Connector | Displays the name of the third party tool for which the particular Response Action was executed. For example: ThreatConnect |
| Comment | Displays the comment provided while executing the Response Action. |
| Executed By |
Displays the name of the user who executed the Response Action last time. |
| Status | Displays the status of the execution of Response Action. For example: Success and Failed. |
Response Actions List view
The Response Actions List view (
The following figure shows the Filters Panel on the left and the Response Actions List on the right.
The following figure shows the Response Actions Overview panel on the right.
Response Actions List
The Response Actions List displays all the Response Actions configured in the NetWitness Platform. You can filter this list to view only the Response Actions of interest.
The following table describes the columns in the Response Actions List.
| Columns | Description |
|---|---|
| Name | Displays the name of all the Response Actions in the Response Actions List view. |
| Description | Displays the descriptions of the Response Actions. |
| Connector | Displays the name of the third party tool for which the particular Response Action is configured. |
| Meta Keys | Displays the list of meta keys for which the Response Action is supported. |
| Status | Displays the current status of the Response Action. For example: Enabled and Disabled. |
| Last Updated | Displays the date and time when the Response Action was last updated. |
| Last Updated By | Displays the name of the user who updated the Response Action last time. |
Response Actions Filters Panel
You can filter the Response Actions based on the following parameters.
-
Response Action Name
-
Status of the Response Action
-
Supported Meta Keys
-
Last updated Date and Time
The following table lists all the fields displayed in the Response Actions Filters panel.
| Fields | Description |
|---|---|
| Name | Allows you to enter the name of the required Response Action. |
| Status |
Allows you to filter the Response Action on the basis of the status. For example: You can select Enabled or Disabled status to filter the required Response Action. |
| Meta Keys | Allows you to filter the Response Action on the basis of the meta keys supported. |
| Last Updated | Allows you to filter the Response Action on the basis of the date and time when the action was last updated. |
Response Actions Overview panel
When you click any row in the Response Actions List, the Overview panel is displayed on the right side of the Response Actions List view which shows the basic summary information about the particular Response Action. The following fields and parameters are displayed in the Overview panel.
-
Name of the Response Action
-
Description of the Response Action
-
Connector Name
-
Connector API
-
Status of the Response Action
-
Supported Meta Keys
-
Name of the user who updated the Response Action last time
-
Date and Time when the Response Action was last updated
-
IP – Meta
-
Additional Parameters
Toolbar Actions in Response Actions view
The table below lists the toolbar actions available in the Response Actions view.
| Option | Description |
|---|---|
 |
Select this option to view the required Response Actions in the Response Actions List view. |
 |
Select this option to delete the required Response Action. |
 |
Select this option to create a new Response Action. This option is grayed out if you have not integrated any connector with NetWitness platform. If the connecter is integrated with NetWitness Platform, you can select the same from the drop-down list. |
 |
Select this option to edit the existing Response Action. |
 |
Select this option to clone the existing Response Action. |
 |
Select this option to enable an already disabled Response Action. |
 |
Select this option to disable the selected Response Action. |
 |
Select this option to view the history of the Response Actions. |
