Description:
Hello,
I am experiencing an issue with the "event_id" field when transferring notable events from Splunk Enterprise Security (ES) to Splunk SOAR.
Details:
- When sending the event to SOAR using an Adaptive Response Action (Send to SOAR), the event is sent successfully, but the "event_id" field does not appear in the data received in SOAR.
Any assistance or guidance to resolve this issue would be greatly appreciated.
Thank you
