Thread Info | |||||
---|---|---|---|---|---|
I am noticing for some of our events our playbooks run multiple times on the same event. How can I go about keeping t...
by
crayford
Explorer
in
Splunk SOAR
06-29-2021
|
0
|
2
| |||
Hi,
I would like to know if we change the status of incident on Splunk Phantom, can we automatically notify user?
...
by
eye893
New Member
in
Splunk SOAR
06-27-2021
|
0
|
1
| |||
I am able to run an action (whois ip from whois app) successfuly. However, if i put this action as part of a playboo...
by
brunofernandez
Explorer
in
Splunk SOAR
02-14-2019
|
0
|
5
| |||
Hi team,
I'm using Phantom to create playbooks and I would like to know how the find artifact is used when I cr...
by
MimiThePrince
New Member
in
Splunk SOAR
06-03-2021
|
0
|
1
| |||
- Would you consider it a best practice to type a password into a prompt from a 3rd party script?
- What if the 3rd...
by
bearcat
Engager
in
Splunk SOAR
06-07-2021
|
1
|
0
| |||
Our Phantom's DECIDED process often crashes for performance reasons.
We suspect this is caused by the low number of...
by
PwC-Kimmy
Explorer
in
Splunk SOAR
05-19-2021
|
0
|
1
| |||
Hi,
I would like to know if there is the possibility to automatically trigger a playbook when there is a change in ...
by
drew19
Path Finder
in
Splunk SOAR
05-05-2021
|
0
|
5
| |||
Introduction
Splunk Phantom ingests objects from connected assets, such as your firewall, services like VirusTotal...
by
mconverse_splun
Splunk Employee
in
Splunk SOAR
05-06-2021
|
0
|
0
| |||
This article applies to Splunk Phantom versions 4.6 , 4.5 , 4.2 , 4.1 , 4.0 , 3.5 , 3.0 , 2.1 , 2.0
...
by
kevinh_splunk
Splunk Employee
in
Splunk SOAR
04-23-2021
|
0
|
0
| |||
This article describes a workaround when you run a playbook and see the "user parameter must be of type string" error...
by
kevinh_splunk
Splunk Employee
in
Splunk SOAR
04-23-2021
|
0
|
0
| |||
NOTE: These steps were verified using Phantom version 4.2.7532 and Splunk Universal Forwarder version 7.2.6.
Networ...
by
kevinh_splunk
Splunk Employee
in
Splunk SOAR
04-23-2021
|
0
|
0
| |||
In some cases, the Splunk Phantom virtual appliance can lose its time synchronization with the system time. For examp...
by
kevinh_splunk
Splunk Employee
in
Splunk SOAR
04-22-2021
|
0
|
0
| |||
This article provides an example of how to use the Splunk Phantom REST API to create multiple assets. This may be use...
by
kevinh_splunk
Splunk Employee
in
Splunk SOAR
04-22-2021
|
0
|
0
| |||
Hello,
I had just signed up for phantom - community edition and was wondering how long the request takes to be appr...
by
mratnan
New Member
in
Splunk SOAR
04-21-2021
|
0
|
0
| |||
Team,
Good day!I will need to install Cisco ISE in Splunk Phantom. I have the new instance of Splunk Phantom insta...
by
geinermiranda
New Member
in
Splunk SOAR
04-20-2021
|
0
|
2
| |||
I installed the Phantom App for Splunk & CIM app.
And connectivity testing between Splunk and Phantom is passed.
...
by
PwC-Kimmy
Explorer
in
Splunk SOAR
04-14-2021
|
0
|
0
| |||
Hi, Anyone know the partitioning table needed for a clustered phantom installation.
by
edgarsilva01
Path Finder
in
Splunk SOAR
04-13-2021
|
0
|
0
| |||
Hi,
Has anyone tried to mount the community ova on a Hyper-V?
I have tried various methods of converting OVA (VMD...
by
makitos
New Member
in
Splunk SOAR
04-12-2021
|
0
|
0
| |||
In the cofense addon https://splunkbase.splunk.com/app/5253/
this confused me for a while on what the credentials w...
by
jonxilinx
Path Finder
in
Splunk SOAR
03-25-2021
|
1
|
1
| |||
How do you update the time in phantom for daylight savings time? We are using NTP on the server and the server time i...
by
dustymiller
New Member
in
Splunk SOAR
03-16-2021
|
0
|
1
| |||
Would it be easier to use a custom phantom playbook to Add a user to a specific AD group from an event trigger, inste...
by
splunk_user4
Explorer
in
Splunk SOAR
02-16-2021
|
0
|
1
| |||
How can I enrich the endpoint tickets, where the ticket is for a MacOS host, lookup the host in Jamf and return the f...
by
brandylee1993
Explorer
in
Splunk SOAR
08-05-2020
|
1
|
2
| |||
How can we pass data from one playbook to its sub playbook?
by
ansusabu
Communicator
in
Splunk SOAR
08-19-2019
|
0
|
9
| |||
I'm currently having trouble accessing Phantom via web gui, it's giving 500 error.
I just need to retrieve the cust...
by
taeshin
New Member
in
Splunk SOAR
03-11-2021
|
0
|
1
| |||
I am using Splunk Enterprise and wish to automatically forward events to Phantom. I am able to send events to Phantom...
by
jhuapl123454321
Explorer
in
Splunk SOAR
03-26-2020
|
0
|
9
|