Thread Info | |||||
---|---|---|---|---|---|
Hi everyone,
It might me a silly question
The simplified case.
3 artifacts within the event with 3 dif...
by
Izzet
New Member
in
Splunk SOAR
08-12-2020
|
0
|
1
| |||
Hi all,
I created a playbook that runs a Splunk search query and I can see in the playbook's debugger and in the ev...
by
Augliv
Loves-to-Learn
in
Splunk SOAR
09-08-2020
|
0
|
1
| |||
Hello, whenever I try to add a new artifact I got the following error
phantom.act(): 'add_artifact_1' cannot be run...
by
linuts
Engager
in
Splunk SOAR
09-08-2020
|
0
|
1
| |||
Hello,
I have a playbook that is currently in production and I don't want to randomly test it without asking the qu...
by
tbrown110
New Member
in
Splunk SOAR
09-11-2020
|
0
|
1
| |||
I've configured a pair of Phantom servers to use warm standby. As per the documentation, I ran ibackup.pyc --setup af...
by
gf13579
Communicator
in
Splunk SOAR
07-22-2020
|
0
|
3
| |||
Can one use Splunk phantom for auto-remediation?
What real-life use cases are applicable to the use of Phantom?
by
rhugo
Observer
in
Splunk SOAR
08-31-2020
|
0
|
1
| |||
I'm trying to close a Notable in ES from Phantom. I'm using the update event action from the Splunk app (v1.3.41) but...
by
gf13579
Communicator
in
Splunk SOAR
07-20-2020
|
0
|
3
| |||
Hi. My request to join the Phantom Community was approved, however the link I was provided has since expired and I ca...
by
brycekaline
Engager
in
Splunk SOAR
08-18-2020
|
1
|
1
| |||
How can I Troubleshoot playbook issue where the wrong raw log is being included in the ticket.For example, where tick...
by
brandylee1993
Explorer
in
Splunk SOAR
08-05-2020
|
0
|
1
| |||
I can't quarantine device by automation.
Action "set quarantine approved" failed.
Message:Er...
by
waleksandrowski
New Member
in
Splunk SOAR
08-04-2020
|
0
|
0
| |||
If I try to search phantom container events by label, status or several other fields, I don't see events relating to ...
by
gf13579
Communicator
in
Splunk SOAR
07-29-2020
|
0
|
1
| |||
I'm very new to Phantom. Can someone provide some guidance or advice for naming playbooks and what has worked or hasn...
by
willhart802
Engager
in
Splunk SOAR
05-20-2020
|
0
|
2
| |||
Dear All,
I'm testing Splunk Phantom using the Community Edition to evaluate this product that seems great.
Con...
by
LouisdesVaux
New Member
in
Splunk SOAR
07-21-2020
|
0
|
0
| |||
Good morning,
I woud like to test Splunk Phantom Community Edition in my home lab. When I try to install it follow...
by
clopmz
Explorer
in
Splunk SOAR
02-25-2020
|
1
|
4
| |||
When I run Get Users against the group named G-SomeGroup it returns just 1 result. The group contains 3 members
I c...
by
gf13579
Communicator
in
Splunk SOAR
06-23-2020
|
0
|
0
| |||
Hi, I am using Phantom to solve login issue in Okta. If a user is facing login issue in Okta, then I want to create a...
by
prakashbesra
New Member
in
Splunk SOAR
05-27-2020
|
0
|
1
| |||
Not sure why I get stuck with a "Loading" screen. Latest version of Splunk.
What am I missing?
by
garciajd123
New Member
in
Splunk SOAR
06-10-2020
|
0
|
2
| |||
I just recently completed the Phantom Admin and Playbook Development training and am in the process of using what I'v...
by
williamchenyp
Explorer
in
Splunk SOAR
05-25-2020
|
0
|
2
| |||
I have completed Phantom playbook that I need to run every 5 minutes. I know that the Timer app can be used to schedu...
by
AlexBryant
Path Finder
in
Splunk SOAR
12-03-2019
|
0
|
3
| |||
So as per the Daily and Monthly selection index has to vary
Daily = index1Monthly=index2
Thanks in Advance!
...
by
kavyakanne
Engager
in
Splunk SOAR
05-17-2020
|
0
|
4
| |||
We're receiving this error from an email that it is unable to process
Apr 30 16:34:37 splunk-phantom01-nonprod SPA...
by
aocvy
Engager
in
Splunk SOAR
05-04-2020
|
0
|
0
| |||
Phantom and Cherwell are integrated. I am planning to create a playbook that fetches the incident details assigned to...
by
mkrishnan
Engager
in
Splunk SOAR
04-27-2020
|
0
|
1
| |||
We want to deliver app updates to Phantom automated via git, we do not want to upload a new app each time one is upda...
by
aocvy
Engager
in
Splunk SOAR
04-28-2020
|
0
|
3
| |||
Hi,I am installing an App and fill out the required information under Asset Info and Asset settings. Under Asset sett...
by
akg12106
New Member
in
Splunk SOAR
04-17-2020
|
0
|
4
| |||
Hi ,
I have integrated splunk with Phantom and can send the events to phantom by clicking on send to Phantom butto...
by
rishma
Explorer
in
Splunk SOAR
04-11-2020
|
0
|
6
|