Splunk SOAR

Splunk SOAR
Community Activity
CS_
Hey, Is there a way to retrieve the raw object of an app action in phantom.collect? So I have an app, which returns t...
by CS_ Path Finder in Splunk SOAR 01-26-2023
0 1
0
1
smith_
Hi, I have edited the inputs.conf file in app.tgz how we can compile it after editing the config file in windows.   t...
by smith_ Builder in Splunk SOAR 01-22-2023
0 14
0
14
joomla
Hi Team,   I have a requirement to integrate Phantom with SNOW. Now the challenge is in SNOW I require some extra fie...
by joomla Engager in Splunk SOAR 01-17-2023
0 1
0
1
ansir
Hi,i'm trying to create a set of playbooks to unit test other playbooks. is it possible to run a playbook without pro...
by ansir Explorer in Splunk SOAR 01-16-2023
0 1
0
1
peterng_
I'm using Splunk SOAR 5.3.3. When I add 10 outputs for a playbook, the warning text appear "Limit 10 outputs reached"...
by peterng_ Engager in Splunk SOAR 01-11-2023
0 4
0
4
ben_r
I'm trying to add a condition in a playbook (version 5.2.1.78411) that will test the current day of the week. At the ...
by ben_r Engager in Splunk SOAR 01-06-2023
0 0
0
0
CS_
Hey all,Trying this as a hail mary, as opened a support case last week and had no response on it. We are trying to us...
by CS_ Path Finder in Splunk SOAR 01-06-2023
0 2
0
2
lynnn_
Hi, I am using the phantom ova to run my Phantom instance. I have just managed to run my playbooks when I previously ...
by lynnn_ Loves-to-Learn Everything in Splunk SOAR 01-03-2023
0 2
0
2
ansir
can the prompt block support optional inputs from a user?
by ansir Explorer in Splunk SOAR 01-03-2023
0 1
0
1
lsethl
I am trying to make a custom function for Cybereason, however as I am not so familiar with Python I was wondering if ...
by lsethl New Member in Splunk SOAR 01-03-2023
0 1
0
1
mark_wymer
Hi everyone, I just watched an excellent demo / tutorial ( https://my.phantom.us/video/78/ ) by someone called Ian Fo...
by mark_wymer Path Finder in Splunk SOAR 12-30-2022
0 3
0
3
sgg
I have a playbook using the Splunk "run query" action block with the "attach_result" action which adds the query resu...
by sgg Engager in Splunk SOAR 12-20-2022
1 0
1
0
sreephantom
 I am using set Label api in my playbook to move the containers to a different label after playbook execution. It wor...
by sreephantom New Member in Splunk SOAR 12-07-2022
0 1
0
1
victor_menezes
Hi guys,   Phantom 4.10.7, I tried to delete containers older than 6 months via delete_containers.pyc and it confirme...
by victor_menezes Communicator in Splunk SOAR 12-01-2022
0 1
0
1
shub_loginsoft
I am trying to provide developer support to splunk soar app. How we can do that.
by shub_loginsoft Explorer in Splunk SOAR 11-30-2022
0 3
0
3
kbuckle7
After updating to unprivileged mode (because privileged is being depcrecated), we are getting access denied issues wh...
by kbuckle7 Observer in Splunk SOAR 11-29-2022
0 4
0
4
recv7353
We are setting up the Phantom App Microsoft Exchange On-Premise EWS version: 3.0.3 to talk to our On Prem Exchange EW...
by recv7353 New Member in Splunk SOAR 11-25-2022
0 1
0
1
sschimper
Hi, I have a simple AWS environment, and want to create an EC2 instance with the Splunk SOAR (On-premises) AMI from t...
by sschimper Splunk Employee Splunk Employee in Splunk SOAR 11-21-2022
0 1
0
1
ansir
Hi, is it possible to add a task in a phase of a workbook in a particular container via an api call? thanks for the h...
by ansir Explorer in Splunk SOAR 11-21-2022
0 5
0
5
dhirajkumar0501
Issue:  Phantom Add-on for Splunk – is not saving any changes done on Saved searches and below error is observed in l...
by dhirajkumar0501 Engager in Splunk SOAR 11-21-2022
0 1
0
1
ansir
Is there a way to edit note in a container via the api? if not is there any plan to expose this api in the future?
by ansir Explorer in Splunk SOAR 11-11-2022
0 3
0
3
scorsatto
I'm creating a custom application in SOAR and one of the fields this custom application provides is a password inform...
by scorsatto Explorer in Splunk SOAR 11-11-2022
0 4
0
4
ansir
is there an api to delete phases/task from a workbook?if not is there any plan to expose this api in the future?
by ansir Explorer in Splunk SOAR 11-10-2022
0 0
0
0
ansir
is there an api to delete workbook using workbook ids?if not is there any plan to expose this api in the future?
by ansir Explorer in Splunk SOAR 11-10-2022
0 0
0
0
kaede_oogami
Hi all, About PlayBook Conditional ExpressionsI have a question. We use the Apps "imap", and we want to execute a pro...
by kaede_oogami Explorer in Splunk SOAR 11-08-2022
0 0
0
0
Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...
Top Solution Authors