Splunk SOAR

SOAR event/case page size

xouu1
New Member

Right now, on a SOAR events/cases/playbooks menu page, a user can select a page size of 5, 10, 15, 25 or 50 which is the number of events, cases or playbooks to be displayed in a browser page. Is there a way to change that setting, for example, can SOAR display 100 events in one page?

Thank you.

Labels (1)
0 Karma

marnall
Motivator

Not directly in the web UI, but you can set the number of page entries by changing the URL parameters. Go to the "Events" queue, then set the page size using the dropdown to any value other than the default.

You will then see your URL look like:

https://yoursoar.com/browse?page=1&per_page=25&filter=new_events&status=new

You can then change per_page=25 to any number. For 100 entries, set per_page=100.

You can do this with Playbooks, Events, and Cases.

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...