Splunk SOAR

Community Activity

Sub Playbooks with Inputs & Outputs Hello All! I'm just starting with Phantom and having a hard time creating "reusable code". To give an example, I ha... by stauff Explorer in Splunk SOAR 02-01-2021 0 2	0	2
Issues with Microsoft Exchange On-Premise EWS polling Hi,We are using Microsoft Exchange On-Premise EWS app version 2.0.29 (Upgraded from 2.0.17) and we are experiencing s... by danieldelacasa Explorer in Splunk SOAR 01-05-2021 0 2	0	2
Phantom MISP - adding attributes with comment I'm trying to add attributes via Phantom MISP app. Adding attributes itself works fine for me when I'm just using pre... by dewu94 Explorer in Splunk SOAR 01-04-2021 0 0	0	0
How to run a Phantom playbook from a Splunk dashboard I have a Phantom playbook that will take security-related actions on any arbitrary host on my network. These actions ... by AlexBryant Path Finder in Splunk SOAR 12-26-2020 0 2	0	2
How to have the "Run Playbook in Phantom" adaptive response to run a specific playbook? Is it possible for the "Run Playbook in Phantom" adaptive response action in ES to automatically run a specific playb... by williamchenyp Explorer in Splunk SOAR 12-26-2020 0 1	0	1
Splunk Phantom Feedback Survey Hi everyone! The Splunk Phantom team is looking for your feedback in this quick 10 minute survey. 20 lucky winners ... by khuang Splunk Employee in Splunk SOAR 12-07-2020 0 0	0	0
Using current container info in a custom function Hi,Within a Custom Function, is it possible to grab information from the current container? For example, I've added t... by s2233 Explorer in Splunk SOAR 12-07-2020 1 1	1	1
invalid token error while communicating through rest API with phantom using splunk by rajafarhat16 New Member in Splunk SOAR 12-01-2020 0 6	0	6
The Splunk Phantom Product Feedback Survey Sweepstakes Official Rules The Splunk Phantom Product Feedback Survey Sweepstakes Official Rules NO PURCHASE OR PAYMENT OF ANY KIND IS NECESSARY... by khuang Splunk Employee in Splunk SOAR 12-01-2020 0 0	0	0
Symantec Enpoint Protection 14 Phantom App While I was checking the SEP 14 Phantom app, 'test connectivity' was working fine, but when it comes to 'Scan endpoin... by ansusabu Communicator in Splunk SOAR 11-30-2020 1 3	1	3
AWS Guardduty App S3 Details Issue The AWS Gaurdduty app from Splunk is not pulling in S3 details, when they normally are included in Gaurdduty alerts.N... by splkphntmuser New Member in Splunk SOAR 10-23-2020 0 0	0	0
Create Ingest Action in Phanto App Hello,I'm trying to develop my first Phanto APP using the wizard. The integration is like a ticketing system and I wa... by jpferrero Engager in Splunk SOAR 10-22-2020 0 2	0	2
Shodan app for Phantom I am trying to configure the Shodan app for Phantom. In the account settings, the only field to set is the Shodan API... by AlexBryant Path Finder in Splunk SOAR 10-21-2020 0 0	0	0
Microsoft LDAP Phantom App Hi,We are trying to retrieve configuration both for AD and LDAP using the "Microsoft LDAP App" for Phantom using a ne... by danieldelacasa Explorer in Splunk SOAR 10-19-2020 1 5	1	5
How to run a playbook triggered by a Windows service information stopping? Hi, Here is my scenario: There are many Windows servers where the Windows service information is flowing to my Splunk... by barisaydogmusog Loves-to-Learn in Splunk SOAR 10-07-2020 0 1	0	1
Connectivity Issue between Splunk Phantom and Splunk Enterprise - runquery action doesn't return any data Hello everyone I need help with using Splunk App in Phantom.I am trying perform searches for Splunk in Phantom, every... by d4wc3k Path Finder in Splunk SOAR 09-29-2020 0 8	0	8
Phantom app for Dell Secure works? Is anyone working on a Phantom App for Dell Secure works? I was going to start trying to work through the Rest API fu... by tvwhipple New Member in Splunk SOAR 09-29-2020 0 4	0	4
Filtering via custom function return I'm attempting to use the address_in_network function to compare results of a Splunk query against a custom list, and... by alexgkirk Explorer in Splunk SOAR 09-23-2020 0 3	0	3
Accessing JSON object with dot in name I'm attempting to access a value returned from a previous block that performed a Splunk query, returning a field name... by alexgkirk Explorer in Splunk SOAR 09-21-2020 1 5	1	5
Phantom: Asset environment variables Once the asset environment variables have been created (mySpecificKey -> mySpecificValue), how do I access these valu... by nhammSplunk Explorer in Splunk SOAR 09-18-2020 1 5	1	5
Phantom integration with Microsoft LDAP I have a problem with integration of Phantom with Active Directory. When I try to test connectivity with "Microsoft L... by waleksandrowski New Member in Splunk SOAR 09-18-2020 0 10	0	10
Phantom 4.1 startup error Dear Team,I am karthik from prudential singapore, our Phantom UAT server suddenly goes down.when we attempt to restar... by karthikes New Member in Splunk SOAR 09-18-2020 0 2	0	2
Can you call a phantom action from a different app? The scenario is that I want to wrap around an existing app (ServiceNow) that make it easier for analysts to use manua... by gf13579 Communicator in Splunk SOAR 09-16-2020 0 2	0	2
How to create loop in Phantom playbook to check for changes in container owner value? I am wanting to kick off a playbook when the container owner value changes from NULL to Not NULL. So far I have creat... by fhq New Member in Splunk SOAR 09-16-2020 0 3	0	3
C901 While compiling and installing the Splunk phantom Application which I have developed, I am getting an error with erro... by chandraprathi Explorer in Splunk SOAR 09-16-2020 0 8	0	8