Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL APISearch Archives Contacting Support
Help button for documentation
    • Terminology Reference
      • Actions
      • Aggregate Alert
      • Aggregation
      • Alert
      • Anomaly Detection
      • API (Application Programming Interface)
      • Archival
      • Asset
      • Asset Permissions
      • Authentication
      • Authorization
      • Automated Actions
      • Backfilling
      • Backup
      • Baseline
      • Bloom Filter
      • Bucket
      • Built-in Parsers
      • Cardinality
      • Cluster
      • Cluster Management
      • Cold Storage
      • Compression
      • Configuration
      • Correlation
      • CrowdStrike Query Language (CQL)
      • Cron
      • CrowdStrike Parsing Standard (CPS)
      • Custom Resource Definitions (CRD)
      • Dashboard
      • Data Export
      • Data Ingestion
      • Data Retention
      • Data Visualization
      • Datasource
      • Deployment
      • Dynamic Configuration
      • Endpoint
      • Enrichment
      • Environment Variables
      • Event
      • Event Fields
      • Event List
      • Extraction
      • Field
      • Field Aliasing
      • Field Data Types
      • Field Mapping
      • Field Panel
      • Filter
      • Filter Alert
      • Format Panel
      • Function
      • GraphQL
      • groupBy()
      • Groups
      • Histogram
      • Hot Storage
      • Humio Operator
      • HumioCluster
      • Identity Provider (IdP)
      • Indexing
      • Ingest Token
      • Ingestion
      • @ingesttimestamp
      • Inspection Panel
      • Installation
      • Integration
      • Join
      • Kubernetes
      • LDAP (Lightweight Directory Access Protocol)
      • License Management
      • Live Query
      • Load Balancing
      • Log Shipper
      • LogScale Query Language (CQL)
      • Lookup Table
      • Multi-Cluster-Search
      • Multi-Cluster View
      • Memory Limits
      • Metadata
      • Metadata Fields
      • Monitoring
      • Node
      • Notification
      • OAuth
      • OpenID Connect (OIDC)
      • Operator
      • Organization
      • Organization Owner
      • Parser
      • Permissions
      • Pipeline
      • Proxy Authentication
      • Query
      • Query Coordinator
      • Query Editor
      • Query Profiling
      • RBAC (Role-Based Access Control)
      • Real-time
      • Regex (Regular Expression)
      • Repository
      • Repository Permissions
      • REST API
      • Result
      • Reverse Proxy
      • Roles
      • Security Assertion Markup Language (SAML)
      • Saved Search
      • Scheduled Search
      • Search
      • Search Interface
      • Security
      • Segment
      • SIEM (Security Information and Event Management)
      • Tag
      • Tag Fields
      • Tagging
      • Template Language
      • Threshold
      • Throttling Period
      • TimeChart
      • @timestamp
      • Timestamp Parsing
      • Token
      • Transformation
      • Triggers
      • User Account
      • User Interface (UI)
      • User Management
      • User Roles
      • View
      • View-based Access Control
      • Visualization
      • Webhook
      • Widget
      • Worker Node
Falcon LogScale Documentation
/ LogScale Terminology

Actions

Automated responses that are triggered when specific conditions in a query are met, for example to inform users of an issue.

Related Content

  • Actions

Related Terms

  • Aggregate Alert

  • Filter Alert

  • Triggers

Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

  • Other articles on this topic

    • Action Type: Email
    • Action Type: Falcon LogScale Repository
    • Action Type: Lookup File
    • Action Type: OpsGenie
    • Action Type: PagerDuty
    • Action Type: S3
    • Action Type: Slack
    • Action Type: VictorOps (Splunk On-Call)
    • Action Type: Webhooks
    • Actions
    • Automation
    • Automations
    • Create Actions
    • Edit triggers
    • Manage Actions
    • Message Templates and Variables
    • Send events that produced aggregate results to actions
    • createActionFromTemplate()
    • createEmailAction()
    • createHumioRepoAction()
    • createOpsGenieAction()
    • createPagerDutyAction()
    • createS3Action()
    • createSlackAction()
    • createSlackPostMessageAction()
    • createUploadFileAction()
    • createVictorOpsAction()
    • createWebhookAction()
    • deleteAction()
    • deleteActionV2()
    • testEmailAction()
    • testSlackAction()
    • testSlackPostMessageAction()
    • testUploadFileAction()
    • testVictorOpsAction()
    • testWebhookAction()
    • updateEmailAction()
    • updateOpsGenieAction()
    • updatePagerDutyAction()
    • updateS3Action()
    • updateSlackAction()
    • updateUploadFileAction()
    • updateUploadFileActionV2()
    • updateVictorOpsAction()
    • updateWebhookAction()

  • Related Release Notes

    • Falcon LogScale 1.186.0 GA (2025-04-29)
    • Falcon LogScale 1.189.1 LTS (2025-06-11)
    • Falcon LogScale 1.189.2 LTS (2025-07-22)
    • Falcon LogScale 1.189.3 LTS (2025-08-06)
    • Falcon LogScale 1.198.0 GA (2025-07-22)
    • Falcon LogScale 1.201.1 LTS (2025-09-02)

  • Related GraphQL API

    • createActionFromTemplate()
    • deleteAction()
    • deleteActionV2()

  • Security (humio-audit) Events

    • Audit Log Event action.delete
    • Audit Log Event upload-file-action.update

  • Training

    • Alerts, Scheduled Searches, and Actions

Enter search term