Splunk SOAR

Phantom : Why are we getting the error "unable to forward this search result: unhashable type: 'dict'" ?

sdubey_splunk
Splunk Employee
Splunk Employee

We are trying to forward the events to phantom via datamodel export function. when we click on save and preview , we are getting the option button "Send to Phantom". But when clicked we are getting an error "Unable to forward this search result: unhashable type: 'dict'"".

Labels (1)
Tags (1)
0 Karma
1 Solution

sdubey_splunk
Splunk Employee
Splunk Employee

splunk : 7.2.0
Phantom app Version : 2.5.4
Phantom product : Phantom 4.1.94

Fix : Dumping the browser cache generally clears this issue up.

View solution in original post

murphybeck
New Member

You're trying to use a dict as a key to another dict or in a set. That does not work because the keys have to be hashable. As a general rule, only immutable objects (strings, integers, floats, frozensets, tuples of immutables) are hashable (though exceptions are possible). So this does not work: The only types of values not acceptable as keys are values containing lists or dictionaries or other mutable types that are compared by value rather than by object identity, the reason being that the efficient implementation of dictionaries requires a key’s hash value to remain constant.

0 Karma

sdubey_splunk
Splunk Employee
Splunk Employee

splunk : 7.2.0
Phantom app Version : 2.5.4
Phantom product : Phantom 4.1.94

Fix : Dumping the browser cache generally clears this issue up.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...