View the action run history
You can view the history of actions run on your instance.
- From the Home menu, select Administration.
- Select System Health > Action Run History.
The Action Run History page displays a sortable list of action runs. Each column except for View Results is sortable. The table displays the following columns:
|Name||The name of the action that was run.|
|Run ID||The numeric ID of the action that was run.|
|Event ID||The numeric ID of the event the action was run against.|
|Start Time||The time the action started.|
|End Time||The time the action finished.|
|Status||Whether the action succeeded or failed.|
|Prompted||If the action taken was a prompt or manual task action, the ID of the user assigned the action appears here.|
|Run By||The name of the user who ran the action.|
|View Results||A hyperlink to the action results in Investigation. For prompt or manual task actions, the link opens a window containing the prompt or task results.|
View the playbook run history in
Use ITSI to monitor the health of your deployment
This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.1.0, 5.2.1, 5.3.1, 5.3.2