Splunk SOAR (f.k.a. Phantom)

phantom vault different filenames with same content have same vaultid

sunilpanda023
Path Finder

hi phantom team,
I have a simple use case to rename a filename in vault.
As its immutable, I copied the contents to vault temp dir and renamed it there. And before adding the renamed file into vault, I did vault delete for existing vault id.
Still I get aka : [ old name , new name] in vault info for new file added to vault. And strange thing is it gets the same vault id.

Thanks,
Sunil


Labels (2)
Tags (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.