Splunk SOAR (f.k.a. Phantom)

Phantom: How to generate a report on cases that are created ?

mkrishnan
Engager

Team,

I am looking for a way to generate a summary report on cases that we have in Phantom ? Which will include case ID, case name, Assignee, Start data, end date , status etc.

I dont find an option to generate such reports in Phantom GUI currently. Please help me if anybody found any solution for this.
I am looking for ways to pull data with the help of Rest API. Please post if anyone has worked on this so far ?

Thank you,
MK

Labels (1)
Tags (1)

rplas
Explorer

There currently isn't a great way to generate custom reports from the UI but I think getting data from the API and building your own report generator is the way to go.

Documentation for the REST API can be found here: https://docs.splunk.com/Documentation/Phantom/4.8/PlatformAPI/Using

The Container API documentation can be found here: https://docs.splunk.com/Documentation/Phantom/4.8/PlatformAPI/RESTContainers

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...