https://community.splunk.com/t5/Splunk-SOAR/Issues-with-Indicators-feature/m-p/689386#M1512 <P>Hello All,</P><P>I enabled my indicators feature with "/opt/phanton/bin/phenv set_preference --indicators yes"</P><P>&nbsp;</P><P>I have two pronlems that might be connected:</P><P>1. I only enabled three fields in the Indicators tab under Administarion, but still SOAR created many indicators on fields that configured as disabled.</P><P>2. I see that enabling the indicators feature consuming all my free RAM memory, and I have a lot of RAM so I unserstand that there is a problem with this.<BR /><BR /></P><P>anyone can say why and how to solve?</P> Mon, 03 Jun 2024 08:46:47 GMT meshorer 2024-06-03T08:46:47Z https://community.splunk.com/t5/Splunk-SOAR/Issues-with-Indicators-feature/m-p/689386#M1512 <P>Hello All,</P><P>I enabled my indicators feature with "/opt/phanton/bin/phenv set_preference --indicators yes"</P><P>&nbsp;</P><P>I have two pronlems that might be connected:</P><P>1. I only enabled three fields in the Indicators tab under Administarion, but still SOAR created many indicators on fields that configured as disabled.</P><P>2. I see that enabling the indicators feature consuming all my free RAM memory, and I have a lot of RAM so I unserstand that there is a problem with this.<BR /><BR /></P><P>anyone can say why and how to solve?</P> Mon, 03 Jun 2024 08:46:47 GMT https://community.splunk.com/t5/Splunk-SOAR/Issues-with-Indicators-feature/m-p/689386#M1512 meshorer 2024-06-03T08:46:47Z