Splunk SOAR

Splunk SOAR
Community Activity
Benni
When an array of dictionaries is assigned to the output variable of a code block, only the whole array can be used as...
by Benni Loves-to-Learn in Splunk SOAR 03-21-2022
0 0
0
0
wilcompl1334
I'm running into an issue where I have multiple artifacts that are being submitted as a Splunk query. Below is my cur...
by wilcompl1334 Explorer in Splunk SOAR 03-16-2022
0 4
0
4
danish121
Hi All,Is there any account lockout policy after multiple failed attempts in Splunk SOAR (on premise),i.e: The user's...
by danish121 Engager in Splunk SOAR 03-16-2022
1 0
1
0
mrzn
We are using Prompt with extended time to 4 days. We have discovered that when the time of running playbook is over t...
by mrzn New Member in Splunk SOAR 03-14-2022
0 2
0
2
Pablo00
HiDoes anyone have examples of how to use Splunk enterprise to investigate and contain ransomware?I would like to det...
by Pablo00 Explorer in Splunk SOAR 03-13-2022
0 1
0
1
mark_wymer
Hi all, Does anyone know if it's possible to use Cyberark to rotate the Splunk SOAR admin account password? If it is,...
by mark_wymer Path Finder in Splunk SOAR 03-10-2022
0 2
0
2
CS_
Hi all,I have a stream of events which come in to SOAR.When the event is loaded in SOAR, a playbook runs against it a...
by CS_ Path Finder in Splunk SOAR 03-09-2022
0 5
0
5
jeffrey_berry
How to customize the Phantom dashboard time filters dropdown box (see screenshot below)?For a Phantom instance, we ha...
by jeffrey_berry Path Finder in Splunk SOAR 03-02-2022
0 3
0
3
rajshekarv
Hi All,I had registered for Splunk Phantom community edition a few days back. However, I am yet to receive a confirma...
by rajshekarv Observer in Splunk SOAR 02-24-2022
0 3
0
3
CS_
I read in another thread that events are not really "deleted" as such, but that they are simply marked in a way that ...
by CS_ Path Finder in Splunk SOAR 02-21-2022
0 2
0
2
rwahidur2
Hi, I have registered successfully for phantom and also got a link to download phantom but could not find Phantom OVA...
by rwahidur2 New Member in Splunk SOAR 01-28-2022
0 0
0
0
joelwking
Using the app user interface introduced in 5.1.0.70187, when running the app from this interface, it fails saving sta...
by joelwking Engager in Splunk SOAR 01-27-2022
1 0
1
0
zubairaizatron
Hi guys I tried installing Splunk Phantom as an underprivileged user as per the documentation:https://docs.splunk.com...
by zubairaizatron Explorer in Splunk SOAR 01-23-2022
0 4
0
4
mark_wymer
Hi all,Does anyone know if it's possible to create a file from a field in an artifact?Scenario:We have an alert in Sp...
by mark_wymer Path Finder in Splunk SOAR 01-19-2022
0 4
0
4
hmvs
Hi Team, Do we have IntelliSense editor support in Phantom Playbook editor in the browser, OR can we integrate existi...
by hmvs Engager in Splunk SOAR 01-18-2022
1 0
1
0
brandyhinton
Hi All, I am writing a playbook that  sends an automated email when a case is opened in phantom.   I know If you are ...
by brandyhinton Loves-to-Learn Lots in Splunk SOAR 01-12-2022
0 0
0
0
iamraprap
I have multiple artifacts and there is a check box beside it. Is there a datapath to access the currently selected ar...
by iamraprap Observer in Splunk SOAR 01-12-2022
0 5
0
5
andrew_burnett
When I try to create a Shared Services server (for a development environment), it prompts me for the password for the...
by andrew_burnett Path Finder in Splunk SOAR 01-07-2022
1 8
1
8
HosamShafikLXT
Dear Splunk team I hope everything is well with you I am writing this post to inform you that I tried to sign up at S...
by HosamShafikLXT New Member in Splunk SOAR 01-04-2022
0 0
0
0
rgrWeidner
Recently upgraded to SOAR 5.0.1from Phantom 4.10 and I'm having some difficulty finding the old "API" actions that ca...
by rgrWeidner Engager in Splunk SOAR 01-04-2022
0 1
0
1
Qingguo
when inputing a customer field of data/time in container,  is there any ways to do hints of input and input validatio...
by Qingguo Engager in Splunk SOAR 12-13-2021
0 1
0
1
Qingguo
Failure to open phantom (4.10.x)  GUI after setting up warm/standby ,   no error message when setup warm/standby and ...
by Qingguo Engager in Splunk SOAR 12-10-2021
0 0
0
0
dmw
Hey everyoneIf an event is added to a case as evidence, it's simple to retrieve it while looking at the case:Sources ...
by dmw New Member in Splunk SOAR 12-08-2021
0 3
0
3
aiyede
Hi, I recently ran into a problem where playbook runs a workflow for a long time (usually hours) without stopping its...
by aiyede Engager in Splunk SOAR 11-30-2021
0 0
0
0
alexander5654
Hi, my team is preparing to upgrade our phantom instance to the newest version, and I had a question regarding the ba...
by alexander5654 New Member in Splunk SOAR 11-30-2021
0 3
0
3
Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...
Top Solution Authors