Testing your custom action

Test whether your script runs successfully and has the intended result before you associate it with a rule.

About this task

Custom action scripts run inside a testing environment that is isolated from your production environment. Custom action scripts typically run on the managed host that runs the event processor. However, if you have an All-In-One appliance, custom actions run on the QRadar Console.

Test Execution is supported only on the QRadar Console and is not supported on managed hosts.

If you must write to disk from a custom action script, you must use the following directory: /home/customactionuser.

1. On the navigation menu ( ), click Admin.
2. In the Custom actions section, click Define actions.
3. Select a custom action from the list and click Test Execution > Execute to test your script. The result of the test and any output that is produced by the script is returned.
4. After you configure and test your custom action, use the Rule Wizard to create a new event rule and associate the custom action with it.

   For more information about event rules, see the IBM QRadar User Guide.