Hi,
Trying to post the token and servername from the Phantomserver, into the Phantom app on the Splunk-server.
This answer: "https://answers.splunk.com/answers/739373/error-adding-a-phantom-server-configuration-in-the.html?utm_source=typeahead&utm_medium=newquestion&utm_campaign=no_votes_sort_relev" I have everything working except creating the server(adding token+servername) thorugh rest-api or equivalent.
Anyone knows how to do this?
Something like this: curl -ku 'admin:pw' https://splunkserver:8089/servicesNS/nobody/phantom/configs/conf-phantom/XXX
Similiar to:
curl -ku 'admin:pw' https://splunkserver:8089/servicesNS/nobody/phantom/configs/conf-phantom/verify_certs\?output_mode\=json -d value=0
Anyone who has done this already?
... View more