https://community.splunk.com/t5/Splunk-SOAR/How-to-get-incident-details-from-Cherwell-using-Phantom-playbook/m-p/487586#M314 <P>Phantom and Cherwell are integrated. <BR />I am planning to create a playbook that fetches the incident details assigned to a specific team in Cherwell. <BR />This playbook needs to run every 5 minutes to get the details from Cherwell.</P> <P>Any pointers are highly appreciated.</P> Sun, 07 Jun 2020 16:26:25 GMT mkrishnan 2020-06-07T16:26:25Z https://community.splunk.com/t5/Splunk-SOAR/How-to-get-incident-details-from-Cherwell-using-Phantom-playbook/m-p/487586#M314 <P>Phantom and Cherwell are integrated. <BR />I am planning to create a playbook that fetches the incident details assigned to a specific team in Cherwell. <BR />This playbook needs to run every 5 minutes to get the details from Cherwell.</P> <P>Any pointers are highly appreciated.</P> Sun, 07 Jun 2020 16:26:25 GMT https://community.splunk.com/t5/Splunk-SOAR/How-to-get-incident-details-from-Cherwell-using-Phantom-playbook/m-p/487586#M314 mkrishnan 2020-06-07T16:26:25Z https://community.splunk.com/t5/Splunk-SOAR/How-to-get-incident-details-from-Cherwell-using-Phantom-playbook/m-p/487587#M315 <P>The Timer App can be used to trigger a playbook on your intended schedule (every 5 mins if needed):<BR /> <A href="https://my.phantom.us/4.8/docs/app_reference/phantom_timer">https://my.phantom.us/4.8/docs/app_reference/phantom_timer</A></P> <P>The active playbook that will execute when the Timer App containers are created can be comprised of any of the actions in the existing Cherwell App:<BR /> <A href="https://my.phantom.us/4.8/docs/app_reference/phantom_cherwell#get-ticket">https://my.phantom.us/4.8/docs/app_reference/phantom_cherwell#get-ticket</A><BR /> <A href="https://my.phantom.us/4.8/docs/app_reference/phantom_cherwell#list-tickets">https://my.phantom.us/4.8/docs/app_reference/phantom_cherwell#list-tickets</A></P> Fri, 01 May 2020 18:42:04 GMT https://community.splunk.com/t5/Splunk-SOAR/How-to-get-incident-details-from-Cherwell-using-Phantom-playbook/m-p/487587#M315 cblumer_splunk 2020-05-01T18:42:04Z