https://community.splunk.com/t5/Splunk-SOAR/Issue-to-Map-fields-between-QRadar-and-Phantom/m-p/467831#M197 <P>Comma separated list of field names. Shouldn't double quotes be used if the field name contains spaces?</P> Fri, 31 Jan 2020 03:09:54 GMT kyung123a 2020-01-31T03:09:54Z https://community.splunk.com/t5/Splunk-SOAR/Issue-to-Map-fields-between-QRadar-and-Phantom/m-p/467830#M196 <P>Hello,</P> <P>I'm using the QRadar integration on Phantom, and we can define the mapping between Phantom and QRadar.<BR />I got an issue when i tried to map fields, so the map works correctly for generic field (QID, username, sourceip, etc...) and Custom Fields that doesn't containing space character, for example "EventID". But when i tried to map custom field that contain a space character like "Domain Name", the mapping doesn't work.<BR />Someone got the same issue than me ?</P> <P>Thank you in advance,<BR />Regards,<BR />Florian</P> Sun, 07 Jun 2020 17:37:32 GMT https://community.splunk.com/t5/Splunk-SOAR/Issue-to-Map-fields-between-QRadar-and-Phantom/m-p/467830#M196 flogo 2020-06-07T17:37:32Z https://community.splunk.com/t5/Splunk-SOAR/Issue-to-Map-fields-between-QRadar-and-Phantom/m-p/467831#M197 <P>Comma separated list of field names. Shouldn't double quotes be used if the field name contains spaces?</P> Fri, 31 Jan 2020 03:09:54 GMT https://community.splunk.com/t5/Splunk-SOAR/Issue-to-Map-fields-between-QRadar-and-Phantom/m-p/467831#M197 kyung123a 2020-01-31T03:09:54Z