> ## Documentation Index
> Fetch the complete documentation index at: https://splunk-training.ipoint-labs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Lab 20: Workflow Actions

> Hands-on lab · 45 min · Module 24

Add event menu actions that look up an IP address on the web and count its events in Splunk.

[Launch Lab 20 in the IP Lab Portal](https://labs.intellectualpoint.com/labs/splunk-lab-20-workflow-actions)

## What you will do

1. Create a GET workflow action that looks up an IP address on the web
2. Create a search workflow action that counts its events
3. Test both from an event's menu

## Before you start

Time
45 minutes
*On your own Splunk lab machine*

Role
admin
*Every lab signs you in as admin*

Module
Module 24: Creating and Using Workflow Actions
*SPK-102*

* Click **Launch Lab 20 in the IP Lab Portal** to open the lab page, then click **Launch** to start your machine.
* Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
* The course data is `access_30DAY.log`, `linux_s_30DAY.log`, `db_audit_30DAY.csv` and `products.csv`.
* Review the slides in [Module 24 Material](https://splunk-training.ipoint-labs.com/spk-102/module-24/material.md) before you start.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.