All Apps and Add-ons

Add Action to SOAR App

kareem
Explorer

Hello, I am implementing some actions in the S1 app for Splunk SOAR. All actions function independently, such as 'run action', and some work within a playbook. However, one action, when attempted within a playbook, displays the following error:
phantom.act(): action 'get endpoint info by computer name' not supported by any enabled apps

Labels (1)
Tags (1)
0 Karma
1 Solution

marnall
Motivator

So the action works when you run it ad-hoc on a container, but not from within a playbook?

If so, could you try making the action name shorter?

View solution in original post

0 Karma

marnall
Motivator

So the action works when you run it ad-hoc on a container, but not from within a playbook?

If so, could you try making the action name shorter?

0 Karma

kareem
Explorer

thanks, for your help.... it works 

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...