Splunk Enterprise Security

Symantec MSS integration with Splunk for orchestration and Incident Management

sonin
New Member

Dear ALL ,

I am searching a procedure to pull and update the incidents from Symantec MSS created by their SOC

they have SWS(secure web service) and API defined with SOAP messages to access tickets and incident.

I know I can fetch it through Rest API with SOAP over HTTPS which require python script.

If anybody know about this type pf integration please help for scripting and rest configuration

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...