Hello All,
New to SPLUNK SOAR. Is there a function or developed by someone where i am trying to export the JSON (output of a splunk query) to CSV? The intent is to add the attachment to our incident management system.
Thanks @phanTom , I am new to Splunk Soaring is there a custom function that is already built for this? Its ok even if its a basic one I can modify based on the requirement.
@prasanthkota you would need to use a custom function to take the JSON results and then build a csv, attach it to the vault, then used that vault file to send to your ticketing system.
https://docs.splunk.com/Documentation/SOARonprem/6.1.0/PlaybookAPI/VaultAPI
- Happy SOARing! Please mark as a solution if it solved your question. -