Splunk SOAR

Splunk SOAR
Community Activity
jkaldor
 Does it leverage an API call to directly to the data sources, or does it use data indexed in Splunk already?
by jkaldor Observer in Splunk SOAR 10-18-2023
0 1
0
1
SOARt_of_Lost
With SOAR 6.1's addition of the "Run automatically when" field, it would be great to be able to run a playbook on con...
by SOARt_of_Lost Path Finder in Splunk SOAR 10-18-2023
0 1
0
1
jirawat_c
Hi All,We tried to use SentinelOne SOAR app to implement playbook to block hash on SentinelOne.SentinelOne SOAR App: ...
by jirawat_c New Member in Splunk SOAR 10-16-2023
0 0
0
0
schimpanze
Hello community,I have come across the issue when I got identical token generated for SOAR user "REST" that I am usin...
by schimpanze Engager in Splunk SOAR 10-13-2023
0 3
0
3
a2my12
Just wanting to know if there is a way that i check in one of the fields whether an email containing a malware has be...
by a2my12 New Member in Splunk SOAR 10-10-2023
0 1
0
1
chris997
Hello!I'm working on setting up the integration between Splunk SOAR and Splunk using the Splunk App for SOAR Export. ...
by chris997 Engager in Splunk SOAR 10-09-2023
0 0
0
0
Arty
Is there an application to send SOAR files to a server?
by Arty Loves-to-Learn Lots in Splunk SOAR 10-09-2023
0 2
0
2
Arty
Is possible to develop Apps outside SOAR with IDE like Visual Studio and test from there and then import the app to s...
by Arty Loves-to-Learn Lots in Splunk SOAR 10-09-2023
0 2
0
2
erratic_moose
Hi Guys,I'm playing around with Splunk Soar on prem.No matter what I do, I can't get this addon working.I've followed...
by erratic_moose New Member in Splunk SOAR 10-03-2023
0 1
0
1
prasanthkota
hello Team, We are trying to develop a function to validate if a user id and pwd are valid(in an artifact). Thought o...
by prasanthkota Engager in Splunk SOAR 09-21-2023
0 0
0
0
irom77
I've created app action 'my_action_name' which results I can collect in playbook just fine.phantom.collect2(container...
by irom77 Explorer in Splunk SOAR 09-18-2023
0 4
0
4
Erick995
good afternoon everyone, i'm trying to change the sender when i configure a new SMTP asset, better said i want to cha...
by Erick995 Engager in Splunk SOAR 09-06-2023
0 0
0
0
Aaron_H
I basically have a long playbook consisting of sub-playbooks. I have 5 artifacts in a container I am using, where 4 w...
by Aaron_H Engager in Splunk SOAR 09-06-2023
0 2
0
2
Erick995
Good afternoon, I am receiving a number of events in splunk soar from splunk, I have a playbook that is executed for ...
by Erick995 Engager in Splunk SOAR 09-06-2023
0 2
0
2
nongingerale
Hi all! I'm trying to go through a list where each item is the input for a child playbook that return a json object. ...
by nongingerale Explorer in Splunk SOAR 09-06-2023
0 3
0
3
scorsatto
I have a Splunk alert where I specify the fields using "| fields ErrorType host UserAgent Country IP_Addr" and I want...
by scorsatto Explorer in Splunk SOAR 09-04-2023
0 0
0
0
Ammar
Hello,I have been trying to integrate Nessus Essentials with SOAR since days but with failure till now,I installed Ne...
by Ammar Explorer in Splunk SOAR 09-02-2023
0 0
0
0
das0
Only downloads I see listed are the unprivileged tgz files and when I run the install I get the following error: Erro...
by das0 Engager in Splunk SOAR 08-28-2023
0 1
0
1
RMcCurdyDOTcom
Don't know another way to do it ...  I had created containers from the Splunk export app for SOAR ( don't us that for...
by RMcCurdyDOTcom Explorer in Splunk SOAR 08-26-2023
0 0
0
0
rogerwolcott
Under SOAR version 6.1.0.131, I configured LDAP authentication.  When I click "test authentication" it says Connectio...
by rogerwolcott Loves-to-Learn in Splunk SOAR 08-22-2023
0 2
0
2
bhushankale
Does Splunk SOAR has use case definition template like the XSOAR has it's own use case definition template.
by bhushankale Observer in Splunk SOAR 08-22-2023
0 0
0
0
MikkaBora
When attaching file to some SOAR actionsE.g. send e-mail  OR update ticket in Jira I am getting the following error t...
by MikkaBora Loves-to-Learn in Splunk SOAR 08-17-2023
0 0
0
0
TheGovernor21
I am using the CrowdStrike App in my playbook and trying to run the detonate file action. One of the required paramet...
by TheGovernor21 Engager in Splunk SOAR 08-16-2023
0 3
0
3
TheGovernor21
When I try to run some actions developing playbooks, I get a notification the Execution was interrupted / cancelled b...
by TheGovernor21 Engager in Splunk SOAR 08-16-2023
0 0
0
0
czmblue
We have successfully configured the Microsoft Teams app in Splunk SOAR, and we are able to send messages to a Teams c...
by czmblue Engager in Splunk SOAR 08-16-2023
1 0
1
0
Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...
Top Solution Authors