Splunk SOAR

Synchronization error while running a single playbook on different events at same time

ansusabu
Communicator

I have a usecase configured in Splunk and we are getting multiple events in phantom at the same time.
When I try to run a playbook, only one event runs an action block and the rest of the events through 'synchronization' error.

Do we have any other way?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...