Splunk SOAR

Phantom: How to generate a report on cases that are created ?

mkrishnan
Engager

Team,

I am looking for a way to generate a summary report on cases that we have in Phantom ? Which will include case ID, case name, Assignee, Start data, end date , status etc.

I dont find an option to generate such reports in Phantom GUI currently. Please help me if anybody found any solution for this.
I am looking for ways to pull data with the help of Rest API. Please post if anyone has worked on this so far ?

Thank you,
MK

Labels (1)
Tags (1)

rplas
Explorer

There currently isn't a great way to generate custom reports from the UI but I think getting data from the API and building your own report generator is the way to go.

Documentation for the REST API can be found here: https://docs.splunk.com/Documentation/Phantom/4.8/PlatformAPI/Using

The Container API documentation can be found here: https://docs.splunk.com/Documentation/Phantom/4.8/PlatformAPI/RESTContainers

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...