Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk SOAR
Splunk SOAR
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Premium Solutions
- :
- Splunk SOAR
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hi ,
I have integrated splunk with Phantom and can send the events to phantom by clicking on send to Phantom butto...
by
rishma
Explorer
in
Splunk SOAR
04-11-2020
|
0
|
6
| ||
|
How do I find which version of Phantom I'm running from the console/ssh?
(Captured question from Phantom Community...
by
sam_splunk
Splunk Employee
in
Splunk SOAR
04-15-2020
|
0
|
1
| ||
|
|
I want the below audit information from Phantom server ingested into Splunk ES and how to retrieve it?1) Login Succes...
by
sdubey_splunk
Splunk Employee
in
Splunk SOAR
07-23-2019
|
0
|
2
| ||
|
|
Phantom is monitoring an email box for me, and every email will have exactly one attachment: a zipped .msg file. I ne...
by
AlexBryant
Path Finder
in
Splunk SOAR
03-24-2020
|
0
|
1
| ||
|
|
So pretty much,
-Grabs the list of all vulnerabilities from big fix and/or tenable -get subnets of the modes we wi...
by
robgray8430
New Member
in
Splunk SOAR
03-17-2020
|
0
|
0
| ||
|
|
Team,
I am looking for a way to generate a summary report on cases that we have in Phantom ? Which will include ca...
by
mkrishnan
Engager
in
Splunk SOAR
03-16-2020
|
1
|
1
| ||
|
|
I have created an alert in Splunk that fires off once a particular type of event is detected and also configured an a...
by
damode
Motivator
in
Splunk SOAR
01-17-2019
|
0
|
8
| ||
|
1) We have installed Phantom on Linux server and while executing playbooks in automation mode ,Our platform is gettin...
by
saikiran334
Explorer
in
Splunk SOAR
01-22-2020
|
0
|
3
| ||
|
Hi Team, Could you please help me with the questions about Counting User Seat.Also, If there is, It is happy to tell ...
by
kfunayama_splun
Splunk Employee
in
Splunk SOAR
01-26-2020
|
0
|
1
| ||
|
|
Hi,
Trying to post the token and servername from the Phantomserver, into the Phantom app on the Splunk-server.
...
by
ucz350
Path Finder
in
Splunk SOAR
01-14-2020
|
0
|
3
| ||
|
Hello.
I wonder about the configuration of phantom.
Question 1.Most of company in Korea need to separated netwo...
by
ragonfly
New Member
in
Splunk SOAR
02-11-2020
|
0
|
2
| ||
|
We have been working on getting an installation of phantom running in a centos:7 docker container using rpm, but are ...
by
kwells0479
Explorer
in
Splunk SOAR
02-12-2020
|
0
|
4
| ||
|
|
I have a top level playbook that calls two playbooks, on that does some analysis and the second one that promotes the...
by
dphegarty
New Member
in
Splunk SOAR
02-07-2020
|
0
|
1
| ||
|
|
We have a python script that basically does "ip address -> ... python-generated splunk calls + viz api calls -> url o...
by
leomeyerovich
Explorer
in
Splunk SOAR
01-31-2020
|
0
|
0
| ||
|
|
When looking at the result of a Phantom automation, say on IP1 & IP2 + User1 & User2, we'd like to also have a table ...
by
leomeyerovich
Explorer
in
Splunk SOAR
01-31-2020
|
0
|
0
| ||
|
|
Question: Are there any locking or concurrency guarantees when playbooks are operating on a container?
Issue I am ...
by
buzz_gt
New Member
in
Splunk SOAR
01-31-2020
|
0
|
0
| ||
|
|
Hello,
I'm using the QRadar integration on Phantom, and we can define the mapping between Phantom and QRadar.I got...
by
flogo
New Member
in
Splunk SOAR
09-04-2019
|
0
|
1
| ||
|
Does anyone have examples of how to use Splunk Phantom to investigate and remediate phishing emails?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to hunt for threats?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to protect an EC2 group from malicious traffic?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to determine if an IP address is malicious?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to automatically contain malicious insiders?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to investigate and remediate malware infections?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to prompt an analyst to block an endpoint?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
| ||
|
|
Does anyone have examples of how to use Splunk Phantom to investigate and contain ransomware?
by
sloshburch
Splunk Employee
in
Splunk SOAR
01-30-2020
|
0
|
1
|
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Become An Expert
Top Labels
-
administration
71 -
authentication
1 -
configuration
116 -
development
126 -
field extraction
1 -
installation
54 -
MissionControl
2 -
other
1 -
troubleshooting
161 -
upgrade
15 -
using Phantom
109 -
using SOAR ⁄ Phantom
301
Get Updates on the Splunk Community!
Tech Talk Recap | Mastering Threat Hunting
Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...
Observability for AI Applications: Troubleshooting Latency
If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...
Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?
In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...
