Quarantine Button Grayed Out or Does Not Work As Expected
Cause: For a user to be able to use the Quarantine button, the Splunk user needs to have both the admin role and the illumio_quarantine_workload role. If the button is green but does not work as expected, it is likely because of a missing admin role. To investigate the cause, check the ta-illumio.log file for error messages.
Fix: To grant the required roles, use the steps in Access to Quarantine Workload Action.