Thread Info | |||||
---|---|---|---|---|---|
Hi fellas, How can we fetch details of a playbook like action_run_id, playbook_run_id and status. We need to monitor ...
by
Manojsai_3
New Member
in
Splunk SOAR (f.k.a. Phantom)
08-23-2022
|
0
|
1
| |||
Is there a way to create a daily report for the amount of times when a particular playbook is ran?
by
zgoggins
New Member
in
Splunk SOAR (f.k.a. Phantom)
08-19-2022
|
0
|
1
| |||
Hi team,
Need help if anyone faced issues on phantom playbooks not processing events after upgrade from 5.0.1...
by
sharada
Loves-to-Learn Everything
in
Splunk SOAR (f.k.a. Phantom)
08-03-2022
|
0
|
1
| |||
Hello All,
We are planning to upgrade phantom platform from 4.10.7 to 5.0.1 version. Can you please let us know th...
by
sharada
Loves-to-Learn Everything
in
Splunk SOAR (f.k.a. Phantom)
07-20-2022
|
0
|
1
| |||
Currently when I want to catch errors coming from arbitrary action block I rely on phantom.get_summary() looking at a...
by
GeorgeOrwell
Explorer
in
Splunk SOAR (f.k.a. Phantom)
08-03-2022
|
0
|
1
| |||
Hello. I have a playbook that must be the only running instance of that playbook. I can't seem to find any "lock" f...
by
stauff
Explorer
in
Splunk SOAR (f.k.a. Phantom)
01-28-2021
|
0
|
8
| |||
What are the list of credentials that are acceptable for Just in Time entry?Or is there a way to add to that list whe...
by
Dave_Burns
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
07-25-2022
|
1
|
5
| |||
I have been seeing containers without any artefacts with jira 'on poll'. After comparison against those successfully ...
by
playbook
New Member
in
Splunk SOAR (f.k.a. Phantom)
07-26-2022
|
0
|
0
| |||
I installed the Splunk App for SOAR Export app on Splunk, and I can see two alert options in manage alerts, namely 'R...
by
geekf
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
07-26-2022
|
0
|
0
| |||
Have anyone ran across the following issue before?
I am trying to implement the Splunk SOAR app but we are not ab...
by
TamishaJ
Engager
in
Splunk SOAR (f.k.a. Phantom)
07-25-2022
|
0
|
1
| |||
Hoping someone can help me get past the last hurdle. I'm trying to create a custom function that dynamically calls ot...
by
Dave_Burns
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
07-15-2022
|
0
|
1
| |||
Hi,We need to use a preprocess script for the Crowdstrike APP but don't manage to have it working.
We are interest...
by
djacquens
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
10-28-2021
|
0
|
2
| |||
Am trying to access Crowdstrike Intel endpoint where oauth2 token is needed. When I test asset connectivity, I get be...
by
jeffminkah20
Observer
in
Splunk SOAR (f.k.a. Phantom)
07-20-2022
|
0
|
3
| |||
I've created an alert in Splunk Enterprise and used the Splunk SOAR / Phantom plugin to call the action "Run a playbo...
by
joconnor
Explorer
in
Splunk SOAR (f.k.a. Phantom)
07-21-2022
|
0
|
3
| |||
Hello,
We currently utilize the Windows Defender ATP v 3.6.0 app in our Splunk SOAR Cloud instance. I've discover...
by
Gewch
Engager
in
Splunk SOAR (f.k.a. Phantom)
07-19-2022
|
0
|
3
| |||
I have two actions linked together.The first one is a block with custom code where I want to list all of the files in...
by
GeorgeOrwell
Explorer
in
Splunk SOAR (f.k.a. Phantom)
07-18-2022
|
0
|
5
| |||
Hi all, I have a use case where i need to check for duplicate JIRA contents Basically, we are ingesting our JIRA into...
by
yw_soar
New Member
in
Splunk SOAR (f.k.a. Phantom)
07-19-2022
|
0
|
0
| |||
Hi All,
ServiceNow supports multiple ticket types such as "RITM", "SCTASK", "INCIDENT". Our Splunk Cloud instance...
by
sdintino_splunk
Splunk Employee
in
Splunk SOAR (f.k.a. Phantom)
07-15-2022
|
0
|
2
| |||
Hi,I have registered for Splunk Phantom Community edition download 3 days ago. However, still the approval is pending...
by
rwahidur2
New Member
in
Splunk SOAR (f.k.a. Phantom)
01-24-2022
|
0
|
1
| |||
I would like to run my playbooks after the changes have been introduced without making commit messages
by
GeorgeOrwell
Explorer
in
Splunk SOAR (f.k.a. Phantom)
07-14-2022
|
0
|
1
| |||
I'm looking for a way to collect all custom lists. While I can do so individually for every Custom List with `phanto...
by
GeorgeOrwell
Explorer
in
Splunk SOAR (f.k.a. Phantom)
07-11-2022
|
0
|
1
| |||
So, I'm looking for a way to synchronize Custom Lists to git the same way Playbooks and Custom Functions are synchron...
by
GeorgeOrwell
Explorer
in
Splunk SOAR (f.k.a. Phantom)
07-06-2022
|
0
|
1
| |||
Hey all,
So I have some playbooks which were working fine previously, but I don't know if something has changed on...
by
CS_
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
07-04-2022
|
0
|
2
| |||
Hi All,
is it possible to retrieve the (splunk soar) instance details inside a playbook?
For instance when send...
by
goncalocoelho
Path Finder
in
Splunk SOAR (f.k.a. Phantom)
06-21-2022
|
0
|
2
| |||
When scanning an endpoint in SOAR how to you get a credential scan? I can start a scan via SOAR playbook but its not ...
by
wisconsin
New Member
in
Splunk SOAR (f.k.a. Phantom)
06-29-2022
|
0
|
1
|