Splunk Enterprise Security

How can I form Notable URL link if I have notable id

nishu3788
Explorer

Hi Everyone,

Can someone help me, How I can form a Splunk Notable URL when I have Notable id (event_id).

The use case is- I am ingesting Notables into Phantom and I need to publish Notable URL for each container in Phantom so that Analyst can click on the URL and can navigate to respective Notable alert in Splunk ES.

 

Labels (2)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...