topic Create Investigation SOAR in Splunk Enterprise Security

topic Create Investigation SOAR in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Create-Investigation-SOAR/m-p/750916#M12606 <P>Hi,</P><P>I need to create an investigation with SOAR.</P><P>When I create the investigation, it doesn't link the Finding to the Investigation. Do you have a playbook that can help me with this feature?</P><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_0-1754049837198.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39817i827BB8005F639402/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_0-1754049837198.png" alt="Giancarlo_Pasq_0-1754049837198.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_1-1754049866749.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39818i4A58C0E0FE1E17CB/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_1-1754049866749.png" alt="Giancarlo_Pasq_1-1754049866749.png" /></span></P><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_2-1754049874745.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39819iBF93646C2F84001E/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_2-1754049874745.png" alt="Giancarlo_Pasq_2-1754049874745.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_3-1754049899926.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39820i54D183846B3A05E8/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_3-1754049899926.png" alt="Giancarlo_Pasq_3-1754049899926.png" /></span></P><P> </P><P> </P> Fri, 01 Aug 2025 12:05:52 GMT Giancarlo_Pasq 2025-08-01T12:05:52Z Create Investigation SOAR https://community.splunk.com/t5/Splunk-Enterprise-Security/Create-Investigation-SOAR/m-p/750916#M12606 <P>Hi,</P><P>I need to create an investigation with SOAR.</P><P>When I create the investigation, it doesn't link the Finding to the Investigation. Do you have a playbook that can help me with this feature?</P><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_0-1754049837198.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39817i827BB8005F639402/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_0-1754049837198.png" alt="Giancarlo_Pasq_0-1754049837198.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_1-1754049866749.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39818i4A58C0E0FE1E17CB/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_1-1754049866749.png" alt="Giancarlo_Pasq_1-1754049866749.png" /></span></P><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_2-1754049874745.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39819iBF93646C2F84001E/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_2-1754049874745.png" alt="Giancarlo_Pasq_2-1754049874745.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Giancarlo_Pasq_3-1754049899926.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39820i54D183846B3A05E8/image-size/medium?v=v2&px=400" role="button" title="Giancarlo_Pasq_3-1754049899926.png" alt="Giancarlo_Pasq_3-1754049899926.png" /></span></P><P> </P><P> </P> Fri, 01 Aug 2025 12:05:52 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Create-Investigation-SOAR/m-p/750916#M12606 Giancarlo_Pasq 2025-08-01T12:05:52Z