splunk-security_content/dist/saaws/default/workflow_actions.conf

[workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task]
label                   = Workbench - AWS Investigate Security Hub alerts by dest
type                    = link
fields                  = dest
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_aws_investigate_security_hub_alerts_by_dest___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_aws_investigate_user_activities_by_arn___response_task]
label                   = Workbench - AWS Investigate User Activities By ARN
type                    = link
fields                  = user
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_identity=$@field_value$&panel=workbench_panel_aws_investigate_user_activities_by_arn___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task]
label                   = Workbench - AWS Investigate User Activities By AccessKeyId
type                    = link
fields                  = accessKeyId
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_aws_investigate_user_activities_by_accesskeyid___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_aws_network_acl_details_from_id___response_task]
label                   = Workbench - AWS Network ACL Details from ID
type                    = link
fields                  = networkAclId
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_aws_network_acl_details_from_id___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_aws_network_interface_details_via_resourceid___response_task]
label                   = Workbench - AWS Network Interface details via resourceId
type                    = link
fields                  = resourceId
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_aws_network_interface_details_via_resourceid___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_aws_s3_bucket_details_via_bucketname___response_task]
label                   = Workbench - AWS S3 Bucket details via bucketName
type                    = link
fields                  = bucketName
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_aws_s3_bucket_details_via_bucketname___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task]
label                   = Workbench - Amazon EKS Kubernetes activity by src ip
type                    = link
fields                  = src_ip
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_amazon_eks_kubernetes_activity_by_src_ip___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_get_all_aws_activity_from_city___response_task]
label                   = Workbench - Get All AWS Activity From City
type                    = link
fields                  = City
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_get_all_aws_activity_from_city___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_get_all_aws_activity_from_country___response_task]
label                   = Workbench - Get All AWS Activity From Country
type                    = link
fields                  = Country
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_get_all_aws_activity_from_country___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_get_all_aws_activity_from_ip_address___response_task]
label                   = Workbench - Get All AWS Activity From IP Address
type                    = link
fields                  = src_ip
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_get_all_aws_activity_from_ip_address___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_get_all_aws_activity_from_region___response_task]
label                   = Workbench - Get All AWS Activity From Region
type                    = link
fields                  = Region
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_get_all_aws_activity_from_region___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_get_ec2_instance_details_by_instanceid___response_task]
label                   = Workbench - Get EC2 Instance Details by instanceId
type                    = link
fields                  = instanceId
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_get_ec2_instance_details_by_instanceid___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_get_ec2_launch_details___response_task]
label                   = Workbench - Get EC2 Launch Details
type                    = link
fields                  = dest
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_get_ec2_launch_details___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_investigate_aws_user_activities_by_user_field___response_task]
label                   = Workbench - Investigate AWS User Activities by user field
type                    = link
fields                  = user
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_identity=$@field_value$&panel=workbench_panel_investigate_aws_user_activities_by_user_field___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get

[workbench_panel_investigate_aws_activities_via_region_name___response_task]
label                   = Workbench - Investigate AWS activities via region name
type                    = link
fields                  = vendor_region
display_location        = field_menu
link.uri                = /app/$@namespace$/ess_workbench_panel?type_asset=$@field_value$&panel=workbench_panel_investigate_aws_activities_via_region_name___response_task&drilldown_field=$@field_name$&use_drilldown_time=true
link.target             = blank
link.method             = get