Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk SOAR
Splunk SOAR
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Premium Solutions
- :
- Splunk SOAR
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I have an action that I need a response from before the playbook can proceed, but the app is prone to occasionally ti...
by
ben_r
Engager
in
Splunk SOAR
10-12-2022
|
0
|
2
| ||
|
|
Hello,
Is there a way to have a playbook automatically trigger when a file is added to an S3 bucket in our AWS acc...
by
akitatake
New Member
in
Splunk SOAR
10-06-2022
|
0
|
0
| ||
|
|
Hi,
We've been trying to use "for loop" logic within playbook app actions. Although, there seems to be no way to ac...
by
rivaanb
Engager
in
Splunk SOAR
10-04-2022
|
0
|
1
| ||
|
|
Hey all,I'm trying to find a way to bulk delete containers via the API in SOAR Cloud.Had an issue where Splunk create...
by
CS_
Path Finder
in
Splunk SOAR
09-28-2022
|
0
|
2
| ||
|
|
Hi all,
is there a way to integrate with O365 and, given a malicious email (identified by subject and sender), sea...
by
drew19
Path Finder
in
Splunk SOAR
09-12-2022
|
0
|
3
| ||
|
|
Has anyone done a playbook for crowdstrike serves stopped? Basically querying splunk for host name, etc? If so can y...
by
brandylee1993
Explorer
in
Splunk SOAR
09-27-2022
|
0
|
0
| ||
|
|
Can I convert a playbook-type input to automation in Splunk SOAR (5.3.4)Thanks for helping.
by
peterng_
Engager
in
Splunk SOAR
09-27-2022
|
0
|
1
| ||
|
|
Hello, I'm trying to sign up for Splunk Phantom Community to download an OVA file for a college project but the revie...
by
ValFreeman
Loves-to-Learn
in
Splunk SOAR
09-26-2022
|
0
|
0
| ||
|
Hi,
I'm using the community edition of the SOAR, in that I created one label after creating that, I created a...
by
Sasti
Engager
in
Splunk SOAR
09-21-2022
|
0
|
0
| ||
|
In a custom code block given the following psuedo code:
def promptIpToBlock(action=None, success=None, container=N...
by
nhammSplunk
Explorer
in
Splunk SOAR
05-01-2020
|
0
|
4
| ||
|
|
Is there a way to create/update/delete tags any other way than through "Administration Settings/Tags"? I was looking ...
by
GeorgeOrwell
Explorer
in
Splunk SOAR
09-12-2022
|
0
|
0
| ||
|
Hi folks,
We've been using Phantom for a while now and currently implementing SAML integration. The concerning part...
by
victor_menezes
Communicator
in
Splunk SOAR
09-09-2022
|
0
|
0
| ||
|
|
I need my Phantom playbook to be able to close a Splunk ES notable event when it's completed, this requires the event...
by
GOB_Bluth
Explorer
in
Splunk SOAR
12-19-2019
|
0
|
11
| ||
|
|
Hi everyone,
I'm looking for a solution here while playing around with the app builder on SOAR, and I could get th...
by
victor_menezes
Communicator
in
Splunk SOAR
08-25-2022
|
2
|
4
| ||
|
|
My team uses playbooks to automate email alerts in Phantom. Some playbooks have been randomly sending emails with the...
by
TheGovernor21
Engager
in
Splunk SOAR
08-31-2022
|
0
|
1
| ||
|
Just came across an interesting use case, and I'm wondering how people solve it. Phantom talks to an internal asset v...
by
Dave_Burns
Path Finder
in
Splunk SOAR
08-29-2022
|
0
|
0
| ||
|
|
I'm trying to create a playbook that uses the Windows Remote Management app to take a file saved locally on a server ...
by
knot9
Engager
in
Splunk SOAR
08-26-2022
|
0
|
0
| ||
|
|
I got the 'Phantom Community Edition - Access Granted' mail.
But regi link was expired. I can't access.
https:/...
by
mhseo
New Member
in
Splunk SOAR
01-31-2022
|
0
|
1
| ||
|
I use "the Splunk Phantom Remote Search app" to connect the Phantom to the Splunk Enterprise, it works fine until aft...
by
nareerat_pr
Explorer
in
Splunk SOAR
08-23-2022
|
0
|
1
| ||
|
|
Hi fellas, How can we fetch details of a playbook like action_run_id, playbook_run_id and status. We need to monitor ...
by
Manojsai_3
New Member
in
Splunk SOAR
08-23-2022
|
0
|
1
| ||
|
|
Is there a way to create a daily report for the amount of times when a particular playbook is ran?
by
zgoggins
New Member
in
Splunk SOAR
08-19-2022
|
0
|
1
| ||
|
|
Hi team,
Need help if anyone faced issues on phantom playbooks not processing events after upgrade from 5.0.1...
by
sharada
Loves-to-Learn Everything
in
Splunk SOAR
08-03-2022
|
0
|
1
| ||
|
|
Hello All,
We are planning to upgrade phantom platform from 4.10.7 to 5.0.1 version. Can you please let us know th...
by
sharada
Loves-to-Learn Everything
in
Splunk SOAR
07-20-2022
|
0
|
1
| ||
|
|
Currently when I want to catch errors coming from arbitrary action block I rely on phantom.get_summary() looking at a...
by
GeorgeOrwell
Explorer
in
Splunk SOAR
08-03-2022
|
0
|
1
| ||
|
|
Hello. I have a playbook that must be the only running instance of that playbook. I can't seem to find any "lock" f...
by
stauff
Explorer
in
Splunk SOAR
01-28-2021
|
0
|
8
|
Become An Expert
Top Labels
-
administration
71 -
authentication
1 -
configuration
116 -
development
128 -
field extraction
1 -
installation
55 -
MissionControl
2 -
other
1 -
troubleshooting
161 -
upgrade
15 -
using Phantom
109 -
using SOAR ⁄ Phantom
305
Get Updates on the Splunk Community!
Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...
If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...
Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions
Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...
Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...
Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...
