Troubleshoot for adaptive response actions not displaying

Issue

An adaptive response action is not available for selection on the detection editor or the View details page for the finding or investigation in Mission Control.

Cause

Your role might not have permissions to view and use the adaptive response action.

Solution

• Check the alert actions manager to determine if the adaptive response actions exist in Splunk platform.
• If the adaptive response actions from an add-on do not appear in Splunk Enterprise Security, but appear in the alert actions manager, make sure that the add-on is exported globally.
• If you can select the adaptive response action on the detection editor, but not on the Mission Control page, the adaptive response action might be an ordinary alert action, or the response action does not support ad hoc invocation.