Splunk SOAR (f.k.a. Phantom)

FireEye HX integration with Phantom

waleksandrowski
New Member
I can't quarantine device by automation. Action "set quarantine approved" failed.
 
Message:
Error from server. Status Code: 422 Data from server: {"details":[{"type":"error","code":2015,"path":"state","message":"Additional properties are not allowed"}],"route":"/hx/api/v3/hosts/agent_id/containment","message":"Unprocessable Entity"}
Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...