Splunk SOAR

Community Activity

How to create Playbook trigger based on different labels? Hi all, I am using Splunk SOAR Community Edition and have a general question on how to correctly trigger a playbook. ... by saiiman Engager in Splunk SOAR 05-05-2022 0 2	0	2
My phantom.us approval Hello, I have signed up for my phantom us in order to get the ova and start testing. Unfortunately my account didn't... by rootxxvv1f New Member in Splunk SOAR 04-28-2022 0 0	0	0
Help understanding Splunk SOAR connectivity to indexers I would like to understand how Splunk SOAR sends data to the indexer endpoints that are configured under Administrati... by kprior201_lilly Path Finder in Splunk SOAR 04-01-2022 0 0	0	0
When Output array of dictionaries from code block, receiving this error When an array of dictionaries is assigned to the output variable of a code block, only the whole array can be used as... by Benni Loves-to-Learn in Splunk SOAR 03-21-2022 0 0	0	0
Action Run Splunk Query Issues I'm running into an issue where I have multiple artifacts that are being submitted as a Splunk query. Below is my cur... by wilcompl1334 Explorer in Splunk SOAR 03-16-2022 0 4	0	4
Splunk SOAR : Account lockout after multiple login attempts Hi All,Is there any account lockout policy after multiple failed attempts in Splunk SOAR (on premise),i.e: The user's... by danish121 Engager in Splunk SOAR 03-16-2022 1 0	1	0
Why are we experiencing this Error "authentication failure on Phantom 4.10"? We are using Prompt with extended time to 4 days. We have discovered that when the time of running playbook is over t... by mrzn New Member in Splunk SOAR 03-14-2022 0 2	0	2
How to investigate and contain ransomware with Splunk enterprise? HiDoes anyone have examples of how to use Splunk enterprise to investigate and contain ransomware?I would like to det... by Pablo00 Explorer in Splunk SOAR 03-13-2022 0 1	0	1
Is it possible to use Cyberark to rotate the Splunk SOAR admin account password? Hi all, Does anyone know if it's possible to use Cyberark to rotate the Splunk SOAR admin account password? If it is,... by mark_wymer Path Finder in Splunk SOAR 03-10-2022 0 2	0	2
How to get app action result in a playbook? Hi all,I have a stream of events which come in to SOAR.When the event is loaded in SOAR, a playbook runs against it a... by CS_ Path Finder in Splunk SOAR 03-09-2022 0 5	0	5
How to customize the Phantom dashboard time filters dropdown box? How to customize the Phantom dashboard time filters dropdown box (see screenshot below)?For a Phantom instance, we ha... by jeffrey_berry Path Finder in Splunk SOAR 03-02-2022 0 3	0	3
Splunk Phantom community edition approval pending Hi All,I had registered for Splunk Phantom community edition a few days back. However, I am yet to receive a confirma... by rajshekarv Observer in Splunk SOAR 02-24-2022 0 3	0	3
Can deleted events be restored? I read in another thread that events are not really "deleted" as such, but that they are simply marked in a way that ... by CS_ Path Finder in Splunk SOAR 02-21-2022 0 2	0	2
Could not find Phantom OVA from download link Hi, I have registered successfully for phantom and also got a link to download phantom but could not find Phantom OVA... by rwahidur2 New Member in Splunk SOAR 01-28-2022 0 0	0	0
Exception: Operation not permitted: '/opt/phantom/local_data/app_states ... Using the app user interface introduced in 5.1.0.70187, when running the app from this interface, it fails saving sta... by joelwking Engager in Splunk SOAR 01-27-2022 1 0	1	0
Splunk Phantom Underprivileged Installation Hi guys I tried installing Splunk Phantom as an underprivileged user as per the documentation:https://docs.splunk.com... by zubairaizatron Explorer in Splunk SOAR 01-23-2022 0 4	0	4
SOAR - Create File from Artifacts Hi all,Does anyone know if it's possible to create a file from a field in an artifact?Scenario:We have an alert in Sp... by mark_wymer Path Finder in Splunk SOAR 01-19-2022 0 4	0	4
Phantom SOAR integration with Visual Studio Code Hi Team, Do we have IntelliSense editor support in Phantom Playbook editor in the browser, OR can we integrate existi... by hmvs Engager in Splunk SOAR 01-18-2022 1 0	1	0
REST query get executed from a playbook Hi All, I am writing a playbook that sends an automated email when a case is opened in phantom. I know If you are ... by brandyhinton Loves-to-Learn Lots in Splunk SOAR 01-12-2022 0 0	0	0
Phantom Selected or Check Box Artifact I have multiple artifacts and there is a check box beside it. Is there a datapath to access the currently selected ar... by iamraprap Observer in Splunk SOAR 01-12-2022 0 5	0	5
Splunk SOAR Shared Services When I try to create a Shared Services server (for a development environment), it prompts me for the password for the... by andrew_burnett Path Finder in Splunk SOAR 01-07-2022 1 8	1	8
Splunk SOAR pending approval Dear Splunk team I hope everything is well with you I am writing this post to inform you that I tried to sign up at S... by HosamShafikLXT New Member in Splunk SOAR 01-04-2022 0 0	0	0
Splunk SOAR visual playbook editor: API actions MIA? Recently upgraded to SOAR 5.0.1from Phantom 4.10 and I'm having some difficulty finding the old "API" actions that ca... by rgrWeidner Engager in Splunk SOAR 01-04-2022 0 1	0	1
How to do hint and input validation for custom field in phantom when inputing a customer field of data/time in container, is there any ways to do hints of input and input validatio... by Qingguo Engager in Splunk SOAR 12-13-2021 0 1	0	1
Failure to open phantom (4.10.x) GUI Failure to open phantom (4.10.x) GUI after setting up warm/standby , no error message when setup warm/standby and ... by Qingguo Engager in Splunk SOAR 12-10-2021 0 0	0	0