https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410631#M4813 <P>ever get an answer?</P> Thu, 15 Nov 2018 21:24:54 GMT mattsvensson 2018-11-15T21:24:54Z https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410630#M4812 <P>Hello,</P> <P>I'm trying to export a Data Model from Splunk Free to Phantom using Phantom App. After configuring the necessary fields and clicking Save and Close I get an Error: </P> <BLOCKQUOTE> <P>Error talking to splunk: POST /servicesNS/nobody/phantom/saved/searches/: status code 400: {"messages":[{"type":"ERROR","text":"Argument \"action.script\" is not supported by this handler."}]}</P> </BLOCKQUOTE> <P>Does anyone encounter the same problem? Or maybe somebody knows where to look at to solve the problem.</P> Thu, 16 Aug 2018 15:37:42 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410630#M4812 obyazov 2018-08-16T15:37:42Z https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410631#M4813 <P>ever get an answer?</P> Thu, 15 Nov 2018 21:24:54 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410631#M4813 mattsvensson 2018-11-15T21:24:54Z https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410632#M4814 <P>I'm thinking that it's something about being on the free version now and not being able to set permission on the app/index.</P> Fri, 16 Nov 2018 03:15:16 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/An-error-while-exporting-a-Data-Model-to-Phantom/m-p/410632#M4814 mattsvensson 2018-11-16T03:15:16Z