Thread Info | |||||
---|---|---|---|---|---|
Hi,
I have an app that ingest offenses from a SIEM system (qradar). One time there were a few thousands offenses ...
by
meshorer
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
yesterday
|
0
|
2
| |||
I'm using the Cisco FireAMP app to return the trajectory of an endpoint, and the data includes a list of all running ...
by
michael3
Explorer
in
Splunk SOAR (f.k.a. Phantom)
Monday
|
0
|
3
| |||
I'm trying to get at the results of a phantom.act() action run, more specifically the Splunk HTTP app "get file" act...
by
cmg
Explorer
in
Splunk SOAR (f.k.a. Phantom)
a week ago
|
0
|
3
| |||
Good morning! Is there a way to update the display message on the Warm Standby instance when users navigate to it?
by
catherinelam
Loves-to-Learn
in
Splunk SOAR (f.k.a. Phantom)
a week ago
|
0
|
3
| |||
Hi,
I ran the HTTP splunk integrations with https://splunkbase.splunk.com/app/5904 I have a problem sending a put ...
by
marq198
Observer
in
Splunk SOAR (f.k.a. Phantom)
a week ago
|
0
|
2
| |||
I have SOAR installed and am trying to figure out how to make configuration changes, specifically for accessing the w...
by
stevenbo
Engager
in
Splunk SOAR (f.k.a. Phantom)
a week ago
|
0
|
0
| |||
hello all!
I am trying to add field to an artifact with "update artifact" action (phantom app).
i am trying to a...
by
meshorer
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
2 weeks ago
|
0
|
4
| |||
Hello
I'm trying to pass a list of dicts from a "custom code block" into a "filter block", to run either ip_lookup,...
by
glc_slash_it
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
3 weeks ago
|
0
|
2
| |||
Using SOAR export app in Splunk, we are pulling certain alerts to SOAR. Depending on the ip, the artifacts are groupe...
by
ansusabu_25
Observer
in
Splunk SOAR (f.k.a. Phantom)
a month ago
|
0
|
5
| |||
hello all,
I have an app that to perform an action I cant insert the required parameter as a list. but as a string....
by
meshorer
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
02-13-2024
|
0
|
3
| |||
Is there a way to use multivalue fields in SOAR? I have not been able to find a good article on how to do this.We hav...
by
staylor
Engager
in
Splunk SOAR (f.k.a. Phantom)
08-04-2022
|
1
|
3
| |||
As the title suggests, our system needs a proxy to hit our SAML2 authentication service, but I don't see an option to...
by
catherinelam
Loves-to-Learn
in
Splunk SOAR (f.k.a. Phantom)
02-26-2024
|
0
|
0
| |||
Hi, I've got a problem with this playbook code block, the custom functions I try to execute seem to hang indefinitely...
by
jokr
Observer
in
Splunk SOAR (f.k.a. Phantom)
02-08-2024
|
0
|
2
| |||
I was wondering if anyone knew where I could find it either in the logs or even better the audit REST endpoint if an ...
by
bcline-lm
New Member
in
Splunk SOAR (f.k.a. Phantom)
02-07-2024
|
0
|
0
| |||
Hi,
I am looking send an email to user with simple yes/no response which I can then use to handle the case. I k...
by
rodneyjerome
Explorer
in
Splunk SOAR (f.k.a. Phantom)
07-01-2021
|
0
|
2
| |||
Our current SOAR servers, fresh install on AWS EC2s, 500's each night. Upon investigation, it looks like there's this...
by
catherinelam
Loves-to-Learn
in
Splunk SOAR (f.k.a. Phantom)
01-30-2024
|
0
|
4
| |||
As the title suggests, I got some SSL certs from my teams, but because the default SSL port is 8443, it's not recogni...
by
catherinelam
Loves-to-Learn
in
Splunk SOAR (f.k.a. Phantom)
02-06-2024
|
0
|
0
| |||
hello all!is there a default time that events (containers/cases) are stored in the SOAR server to approach to?and if ...
by
meshorer
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
02-03-2024
|
0
|
5
| |||
Hi all,
I need to clarify the correlation searches within SOAR. Is there any way to identify them?
by
AL3Z
Builder
in
Splunk SOAR (f.k.a. Phantom)
02-01-2024
|
0
|
5
| |||
Hey folks, does anyone know of a straightforward way to get a count of the number of times each playbook is used as a...
by
jenniandthebets
Explorer
in
Splunk SOAR (f.k.a. Phantom)
01-30-2024
|
1
|
2
| |||
I am working on a playbook where there is a need to copy the current event's artifacts into a separate open and exis...
by
MikeR
New Member
in
Splunk SOAR (f.k.a. Phantom)
01-22-2024
|
0
|
2
| |||
Good morning Support,
I am writing to you regarding a problem. I am a member of Phantom Community, I have downloade...
by
alobuono
Loves-to-Learn
in
Splunk SOAR (f.k.a. Phantom)
03-24-2023
|
0
|
1
| |||
Is it possible to run a playbook on demand, meaning a manual trigger by an analyst such as clicking a playbook during...
by
cmg
Explorer
in
Splunk SOAR (f.k.a. Phantom)
01-11-2024
|
0
|
5
| |||
Hello community, how can I make a playbbok run every 5 minutes automatically?
by
Carloszavala121
Explorer
in
Splunk SOAR (f.k.a. Phantom)
01-22-2024
|
0
|
1
| |||
Hi,
I am implementing a Splunk SOAR Connector and i was wondering if it is possible to write logs at different lev...
by
emesabarrameda
Loves-to-Learn
in
Splunk SOAR (f.k.a. Phantom)
01-19-2024
|
0
|
2
|