Is there a method in which a playbook can be configured to add the tag to the artifact and not the whole container. We are running Splunk SOAR 5.0.1 on prem. The playbook logic works but the only issue is the entire container gets tagged.
There is an action for the phantom app to update artifact tags. I am not sure which version of the phantom app you are using but that may solve your problem if you add that to your playbook.
