| Hello everyone I need help with using Splunk App in Phantom.I am trying perform searches for Splunk in Phantom, every... by d4wc3k Path Finder in Splunk SOAR 09-29-2020 0 8 | 0 | 8 | ||
| Is anyone working on a Phantom App for Dell Secure works? I was going to start trying to work through the Rest API fu... by tvwhipple New Member in Splunk SOAR 09-29-2020 0 4 | 0 | 4 | ||
| I'm attempting to use the address_in_network function to compare results of a Splunk query against a custom list, and... by alexgkirk Explorer in Splunk SOAR 09-23-2020 0 3 | 0 | 3 | ||
| I'm attempting to access a value returned from a previous block that performed a Splunk query, returning a field name... by alexgkirk Explorer in Splunk SOAR 09-21-2020 1 5 | 1 | 5 | ||
| Once the asset environment variables have been created (mySpecificKey -> mySpecificValue), how do I access these valu... by nhammSplunk Explorer in Splunk SOAR 09-18-2020 1 5 | 1 | 5 | ||
| I have a problem with integration of Phantom with Active Directory. When I try to test connectivity with "Microsoft L... by waleksandrowski New Member in Splunk SOAR 09-18-2020 0 10 | 0 | 10 | ||
| Dear Team,I am karthik from prudential singapore, our Phantom UAT server suddenly goes down.when we attempt to restar... by karthikes New Member in Splunk SOAR 09-18-2020 0 2 | 0 | 2 | ||
| The scenario is that I want to wrap around an existing app (ServiceNow) that make it easier for analysts to use manua... by gf13579 Communicator in Splunk SOAR 09-16-2020 0 2 | 0 | 2 | ||
| I am wanting to kick off a playbook when the container owner value changes from NULL to Not NULL. So far I have creat... by fhq New Member in Splunk SOAR 09-16-2020 0 3 | 0 | 3 | ||
| While compiling and installing the Splunk phantom Application which I have developed, I am getting an error with erro... by chandraprathi Explorer in Splunk SOAR 09-16-2020 0 8 | 0 | 8 | ||
| When parsing the email message body for inclusion in the ticket in Jira, parsing fails on special characters or non-A... by brandylee1993 Explorer in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| What is best practice for the HEC endpoint(s) for the "Phantom Remote Search" app in a clustered environment?Per the ... by jeffrey_berry Path Finder in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| Phantom 4.9 supports Markdown notes and it is possible to add markdown note using GUI. But how to use markdown with t... by Izzet New Member in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| Hi everyone, It might me a silly question The simplified case. 3 artifacts within the event with 3 different IP add... by Izzet New Member in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| Hi all,I created a playbook that runs a Splunk search query and I can see in the playbook's debugger and in the event... by Augliv Loves-to-Learn in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| Hello, whenever I try to add a new artifact I got the following errorphantom.act(): 'add_artifact_1' cannot be run on... by linuts Engager in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| Hello,I have a playbook that is currently in production and I don't want to randomly test it without asking the quest... by tbrown110 New Member in Splunk SOAR 09-16-2020 0 1 | 0 | 1 | ||
| I've configured a pair of Phantom servers to use warm standby. As per the documentation, I ran ibackup.pyc --setup af... by gf13579 Communicator in Splunk SOAR 09-16-2020 0 3 | 0 | 3 | ||
| Can one use Splunk phantom for auto-remediation?What real-life use cases are applicable to the use of Phantom? by rhugo Observer in Splunk SOAR 08-31-2020 0 1 | 0 | 1 | ||
| I'm trying to close a Notable in ES from Phantom. I'm using the update event action from the Splunk app (v1.3.41) but... by gf13579 Communicator in Splunk SOAR 08-19-2020 0 3 | 0 | 3 | ||
| Hi. My request to join the Phantom Community was approved, however the link I was provided has since expired and I ca... by brycekaline Engager in Splunk SOAR 08-18-2020 1 1 | 1 | 1 | ||
| How can I Troubleshoot playbook issue where the wrong raw log is being included in the ticket.For example, where tick... by brandylee1993 Explorer in Splunk SOAR 08-05-2020 0 1 | 0 | 1 | ||
| I can't quarantine device by automation. Action "set quarantine approved" failed. Message:Error from server. Status ... by waleksandrowski New Member in Splunk SOAR 08-04-2020 0 0 | 0 | 0 | ||
| If I try to search phantom container events by label, status or several other fields, I don't see events relating to ... by gf13579 Communicator in Splunk SOAR 07-29-2020 0 1 | 0 | 1 | ||
| I'm very new to Phantom. Can someone provide some guidance or advice for naming playbooks and what has worked or hasn... by willhart802 Engager in Splunk SOAR 07-23-2020 0 2 | 0 | 2 |