17.1 Action Manager

The Action Manager allows you to configure repeatable actions that can be executed in various contexts throughout the Sentinel system. The Action Manager allows you to configure the following types of actions:

NOTE:Except for JavaScript actions, the actions above can only be used in the context of a correlation rule deployment. For more information about correlation-only actions, see the Correlation section. This section focuses exclusively on JavaScript action plug-ins and actions.

Using the Action Manager you can import, create, and manage action plug-ins (.zip files) and configure specific action instances.

To use action plug-ins, a user must be assigned the necessary permissions in the User Manager. By default these permissions are assigned to admin user.

  1. Log into the Sentinel Control Center as a user with permissions to use the User Manager.

  2. Go to the Admin tab.

  3. Open the User Configuration folder.

  4. Open the User Manager window. Double-click the desired user. The User Details window displays.

  5. Click the Permissions tab.

  6. Select View Actions, Manage Actions, or Manage Action Plugins (which automatically selects all child permissions). The new permissions are applied the next time the user logs in. For more information, see Sentinel 6.1 Rapid Deployment Control Center User Permissions in the Sentinel 6.1 Rapid Deployment Reference Guide.