Splunk SOAR

Community Activity

How to upload/attach a file (vault) to a container via rest api? I am looking for a rest endpoint to be able to attach the source file to the event. You can do this through the brows... by rudnima7 New Member in Splunk SOAR 06-01-2023 0 1	0	1
Installing Splunk SOAR On-Prem Unprivileged User- Why are we getting this error? Hi, I am trying to install Splunk SOAR 6.0.1 for Linux. I've followed the prerequisites here: https://docs.splunk.com... by casperr New Member in Splunk SOAR 06-01-2023 0 0	0	0
How do I disable a running Playbook? In Splunk Phantom 4.10 Free Community Edition, how can we disable a playbook with a status of running other than by u... by 1lovebeer New Member in Splunk SOAR 05-29-2023 0 0	0	0
Is there an architecture that explains how Splunk SOAR works? Helloplease I would like to know if there is a schematic architecture that explains how Splunk SOAR works (where we c... by Kays New Member in Splunk SOAR 05-23-2023 0 1	0	1
Is there a python library or syntax that we can use to write output to an index? We would like to send some additional data during playbook execution to phantom indexes. Is there a python library o... by mladen_tomic Engager in Splunk SOAR 05-18-2023 0 0	0	0
Error adding External Splunk Enterprise Instance to SOAR Hello,I am attempting to add an External Splunk Enterprise Instance to SOAR and receive the following error when I cl... by JAvnaim Explorer in Splunk SOAR 05-15-2023 0 2	0	2
Why are playbooks only showing as code? When creating a playbook, the view of individual blocks goes away when adding custom code. Is this expected or some t... by mbrown1 New Member in Splunk SOAR 05-11-2023 0 1	0	1
How can I check on PG side what is consuming more space in the database? Hi guys,I'm trying to isolate what is being responsible for most of the data size on phantom. My data/db/base folder ... by victor_menezes Communicator in Splunk SOAR 04-27-2023 0 3	0	3
Splunk Phantom Community Edition Registration approval pending? Hi,I have registered for Splunk Phantom Community edition download 4 days ago. However, still the approval is pending... by anweshkumar12 Engager in Splunk SOAR 04-24-2023 0 1	0	1
How do I pass a dictionary into a Format Code Block - error in expanding Hello - I'm trying to pass a dictionary into a format code block:for example:my_dict = {"hello":"world", "foo":"bar"}... by nongingerale Explorer in Splunk SOAR 04-20-2023 0 3	0	3
Getting containers from Jan to March using REST API Hi there, I am trying to get the containers detials for stipulated time period, Lets say, Jan 1st 2023 - March 31st ... by JoshiSri Explorer in Splunk SOAR 04-19-2023 0 5	0	5
How to import containers via rest api? We have a need to migrate our phantom data to another instance including the containers. Though it's not listed in R... by dennyw Engager in Splunk SOAR 04-18-2023 0 1	0	1
Sending emails with Splunk SMTP app for SOAR v 2.3.0 We had previously been successfully using the Splunk SMTP app for SOAR (Phantom) until the beginning of this year. W... by rferg06 Explorer in Splunk SOAR 04-17-2023 0 0	0	0
Has anyone integrated Kaspersky security center v13/14? Hi splunker, anyone had try to integrate Kaspersky security center v13/14? there is so many api reference here https:... by bambarita Observer in Splunk SOAR 04-11-2023 0 0	0	0
Splunk Soar - Windows Remote Management - Custom Code in Run Script Shape Hello,I'm trying to utilize the following script (at the bottom) in the 'Run Script' shape in the Windows Remote Mana... by whill New Member in Splunk SOAR 04-05-2023 0 0	0	0
Possible for Splunk SOAR playbook tag on Artifact and not container? Is there a method in which a playbook can be configured to add the tag to the artifact and not the whole container. W... by bond_dev Engager in Splunk SOAR 04-01-2023 0 1	0	1
Does anyone know if the script soar-install can be passed an option not to check disk space? For SOAR v5.3.5 there is a pre-req that /tmp has min 5Gb free. Does anyone know if the script soar-install can be pas... by SP344374 New Member in Splunk SOAR 03-27-2023 0 1	0	1
Prompting the user who runs the playbook Going through the documentation for the prompt block, I see there is a way to send the prompt to the dynamic role "Pl... by shzhang New Member in Splunk SOAR 03-27-2023 0 1	0	1
Splunk Phantom Community Edition Registration approval pending? Hi,I have registered for Splunk Phantom Community edition download 4 days ago. However, still the approval is pending... by rajkumarv Engager in Splunk SOAR 03-13-2023 0 7	0	7
How to see debug logs from the view.py file of an application? Hi, I’m creating an application via the app wizard and I wish to render a custom view. I have a view.py file with the... by ansir Explorer in Splunk SOAR 03-06-2023 0 0	0	0
Can I create a playbook in SOAR to get emails from exchange server based on a message_id? Can anyone create a playbook in SOAR to get emails from exchange server based on a message_id that is already in the... by RatnadeepDR New Member in Splunk SOAR 02-28-2023 0 0	0	0
How to create a chart widget to be displayed in a container? Hi, is it possible to create a chart widget (like a bar chart) to be displayed in a container when an action is ran ... by ansir Explorer in Splunk SOAR 02-28-2023 0 0	0	0
Why is the Module import of the connector py module failing? I was doing a testing connectivity and my node 2 the teste connectivity passed, but on node 3 i got a this error "Mod... by zandani Engager in Splunk SOAR 02-27-2023 1 0	1	0
How to update an artifact field? is there an option to update the value of a specific field within a specific artifact? I was able to update using pha... by scorsatto Explorer in Splunk SOAR 02-24-2023 0 5	0	5
SOAR - Only add to the list when the condition is met? Hi, I have a list of hosts that i want to check their status , so I have created an if statement to filter out the ... by newsplunker1 Path Finder in Splunk SOAR 02-23-2023 0 2	0	2