Hi, I want to use the HashiCorp Vault app to get usernames and passwords. But since my HashiCorp Vault service has call limitation (i.e. the service will block an IP that calls the service too frequently), I want to cache the results. I could not find a way in SOAR to cache secrets. The cached secrets should be referenced by all playbooks and custom functions, without calling HashiCorp Vault again and again.   ... View more

Hi, After I ticked "Enable Indexer acknowledgement" in "HTTP Event Collection" -> "Auto Generated ITSI Event Management Token", I no longer have notable events generated. And I saw  "Data channel is missing" errors in _internal index.   After some research, I understood from https://docs.splunk.com/Documentation/Splunk/8.2.7/Data/AboutHECIDXAck that HEC sender must include a channel identifier. But how do I configure ITSI so that it include channel identifier when it is generating notable events? Thank you very much.   ... View more