I tried to run adaptive response actions from the Incident Review page in Splunk ES to send a notable event to Splunk Phantom, the notable event is sent but there is no artifact on the container then I found the error log as the picture below.
Today I try to run this adaptive response with the same notable event again, there is no error and the container is sent to Splunk Phantom with all artifacts.
Has anyone found this error before? I want to know how to prevent this error.
