Splunk SOAR

MS Graph API duplicate email ingestion into Splunk SOAR

DeepthiNavuru
Engager

Hello,

Good day!

MS Graph API duplicate email ingestion into Splunk SOAR:  We have Splunk SOAR v 6.1.1, and the Graph API v3, the ingestion settings are polling selected to interval and every 4 minutes. We are noticing duplicate ticket/email ingestion every 4 minutes causing our playbook (label_change) to error out with Validation error and could not update the record Re: SOAR Could not update record due to Validation... - Splunk Community

Appreciate your guidance in advance!

 

Labels (1)
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Federated Search for Snowflake Is Now Generally Available on Splunk Cloud Platform

Splunk is excited to announce the General Availability (GA) of Federated Search for ...

Help Us Build Better Splunk Regex Puzzles (And Win Prizes!)

If you’ve spent any time in the Splunk Community Slack, you’ve likely seen our resident Splunk Trust ...

Fuel Your Journey: What’s Waiting for You at the .conf26 Acceleration Station

Navigating the show floor at .conf26 isn't just about keynotes and technical breakout sessions; it's also ...