Security Premium Solutions

Category Activity

	How to add link in ES Notable events "next steps" form? Hi Guys, I would ask how to add a link on the next steps form. on the correlation search I read: "Add a link to an ... by aasabatini Motivator in Splunk Enterprise Security Monday 0 4	0	4
	Phantom App for Splunk not respecting Global field mappings i have Multiple event forwardings enabled on my Phantom App for Splunk that use saved searches to trigger notable eve... by soumyasaha25 Contributor in Splunk SOAR (f.k.a. Phantom) Monday 0 3	0	3
	How can we track when Correlation searches were created HelloWe have multiple people working on the content in Splunk Enterprise Security, and I need to be able to find when... by LIP Loves-to-Learn in Splunk Enterprise Security Monday 0 9	0	9
	Risk Event Timeline not working. Error: "Risk event has missing or invalid fields" I am trying to pull up the Risk Event Timeline for a Risk Notable in my Incident Review Dashboard. Every time I cli... by stewlarsen New Member in Splunk Enterprise Security Sunday 0 1	0	1
	Is it possible to make it mandatory to assign Dispositions to Notable Events in ES? Hi,Notable events in ES can now be assigned Dispositions. I am able to create new Dispositions from the Incident Revi... by ezmo1982 Path Finder in Splunk Enterprise Security a week ago 0 0	0	0
	Splunk ES: Best way to do a Yes/No or simple indicator for acceptance of an alert? Hi all,My team needs to clear an alert with a totally different department before we consider it "published" for the ... by sssinqiry5 Engager in Splunk Enterprise Security 2 weeks ago 0 1	0	1
	Threat activity - Errors in correlation search related to RBA? Hi, I'm wondering if there isn't an issue with the correlation search that comes with Splunk ES "Threat activity dete... by XavG Loves-to-Learn in Splunk Enterprise Security 2 weeks ago 0 1	0	1
	What is the proper way to Purge SOAR containers/events? Hello, What is the proper way to purge Splunk SOAR/phantom containers from the database. It seems that deleting a con... by ouss Explorer in Splunk SOAR (f.k.a. Phantom) 2 weeks ago 0 4	0	4
	How to import Azure Sentinal SIEM data to Splunk SOAR? Hi Community, Could any of you please let me know if there is any way or pre written app to connect Azure Sentinal wi... by saurabhpati New Member in Splunk SOAR (f.k.a. Phantom) 2 weeks ago 0 0	0	0
	Unable to open some correlation rules in Splunk enterprise security? When I click on some correlation rules in content management in Splunk ES, I get the following error and it does not ... by Toto1 New Member in Splunk Enterprise Security 2 weeks ago 0 0	0	0