View the action run history
You can view the history of actions run on your Splunk SOAR (On-premises) instance.
- From the Home menu, select Administration.
- Select System Health > Action Run History.
The Action Run History page displays a sortable list of action runs. Each column except for View Results is sortable. The table displays the following columns:
| Column name | Description |
|---|---|
| Name | The name of the action that was run. |
| Run ID | The numeric ID of the action that was run. |
| Event ID | The numeric ID of the event the action was run against. |
| Start Time | The time the action started. |
| End Time | The time the action finished. |
| Status | Whether the action succeeded or failed. |
| Prompted | If the action taken was a prompt or manual task action, the ID of the user assigned the action appears here. |
| Run By | The name of the user who ran the action. |
| View Results | A hyperlink to the action results in Investigation. For prompt or manual task actions, the link opens a window containing the prompt or task results. |