Splunk SOAR

Community Activity

FireEye HX integration with Phantom I can't quarantine device by automation. Action "set quarantine approved" failed. Message:Error from server. Status ... by waleksandrowski New Member in Splunk SOAR 08-04-2020 0 0	0	0
Why don't I see Splunk events for containers with Phantom-ingested emails? If I try to search phantom container events by label, status or several other fields, I don't see events relating to ... by gf13579 Communicator in Splunk SOAR 07-29-2020 0 1	0	1
Recommendations for naming conventions and organization of playbooks in Phantom? I'm very new to Phantom. Can someone provide some guidance or advice for naming playbooks and what has worked or hasn... by willhart802 Engager in Splunk SOAR 07-23-2020 0 2	0	2
Getting connectivity error about enabling cookie support when using Phantom Talos Intelligence App v1.0.1. Dear All, I'm testing Splunk Phantom using the Community Edition to evaluate this product that seems great. Configuri... by LouisdesVaux New Member in Splunk SOAR 07-21-2020 0 0	0	0
About to install Splunk Phantom Community Edition Good morning, I woud like to test Splunk Phantom Community Edition in my home lab. When I try to install it following... by clopmz Explorer in Splunk SOAR 07-09-2020 1 4	1	4
Why might the LDAP Get Users action not return all members? When I run Get Users against the group named G-SomeGroup it returns just 1 result. The group contains 3 membersI can ... by gf13579 Communicator in Splunk SOAR 06-23-2020 0 0	0	0
How to create event for Okta in Phantom. Hi, I am using Phantom to solve login issue in Okta. If a user is facing login issue in Okta, then I want to create a... by prakashbesra New Member in Splunk SOAR 06-10-2020 0 1	0	1
Problem: Trying to create auth tokens Not sure why I get stuck with a "Loading" screen. Latest version of Splunk.What am I missing? by garciajd123 New Member in Splunk SOAR 06-10-2020 0 2	0	2
Phantom's builtin Splunk app errors out when updating Notable Events in ES I just recently completed the Phantom Admin and Playbook Development training and am in the process of using what I'v... by williamchenyp Explorer in Splunk SOAR 05-29-2020 0 2	0	2
change index value based on the dropdown selection So as per the Daily and Monthly selection index has to vary Daily = index1Monthly=index2 Thanks in Advance! <fieldset... by kavyakanne Engager in Splunk SOAR 05-17-2020 0 4	0	4
EWS for Office 365 encoding error "unknown encoding: windows-874" We're receiving this error from an email that it is unable to process Apr 30 16:34:37 splunk-phantom01-nonprod SPAWN[... by aocvy Engager in Splunk SOAR 05-04-2020 0 0	0	0
How to get incident details from Cherwell using Phantom playbook ? Phantom and Cherwell are integrated. I am planning to create a playbook that fetches the incident details assigned to... by mkrishnan Engager in Splunk SOAR 05-01-2020 0 1	0	1
Unable to configure additional Phantom App repo We want to deliver app updates to Phantom automated via git, we do not want to upload a new app each time one is upda... by aocvy Engager in Splunk SOAR 05-01-2020 0 3	0	3
Configuring App - Error - Missing required fields secrect,key Hi,I am installing an App and fill out the required information under Asset Info and Asset settings. Under Asset sett... by akg12106 New Member in Splunk SOAR 04-20-2020 0 4	0	4
Forwarding Splunk events to Phantom automatically Hi , I have integrated splunk with Phantom and can send the events to phantom by clicking on send to Phantom button. ... by rishma Explorer in Splunk SOAR 04-16-2020 0 6	0	6
How can I determine my Phantom Version? How do I find which version of Phantom I'm running from the console/ssh? (Captured question from Phantom Community Sl... by sam_splunk Splunk Employee in Splunk SOAR 04-15-2020 0 1	0	1
Phantom: How to retrieve audit logs from Phantom and ingest into Enterprise Security on Splunk? I want the below audit information from Phantom server ingested into Splunk ES and how to retrieve it?1) Login Succes... by sdubey_splunk Splunk Employee in Splunk SOAR 04-10-2020 0 2	0	2
How to unzip and parse an email attachment in Phantom Phantom is monitoring an email box for me, and every email will have exactly one attachment: a zipped .msg file. I ne... by AlexBryant Path Finder in Splunk SOAR 03-25-2020 0 1	0	1
I was wondering if any of you had a cheat sheet to make playbooks to help automate my job for beginners. So pretty much, -Grabs the list of all vulnerabilities from big fix and/or tenable -get subnets of the modes we will ... by robgray8430 New Member in Splunk SOAR 03-17-2020 0 0	0	0
Phantom: How to generate a report on cases that are created ? Team, I am looking for a way to generate a summary report on cases that we have in Phantom ? Which will include case ... by mkrishnan Engager in Splunk SOAR 03-16-2020 1 1	1	1
Events not received in Phantom I have created an alert in Splunk that fires off once a particular type of event is detected and also configured an a... by damode Motivator in Splunk SOAR 03-09-2020 0 8	0	8
Phantom environment is not stable occasionally ! 1) We have installed Phantom on Linux server and while executing playbooks in automation mode ,Our platform is gettin... by saikiran334 Explorer in Splunk SOAR 03-04-2020 0 3	0	3
Questions about Phantom License: Counting User Seat (User Base) Hi Team, Could you please help me with the questions about Counting User Seat.Also, If there is, It is happy to tell ... by kfunayama_splun Splunk Employee in Splunk SOAR 03-04-2020 0 1	0	1
configure Phantom app in Splunk through RestApi Hi, Trying to post the token and servername from the Phantomserver, into the Phantom app on the Splunk-server. This a... by ucz350 Path Finder in Splunk SOAR 03-04-2020 0 3	0	3
I wonder about the configuration of phantom. Hello. I wonder about the configuration of phantom. Question 1.Most of company in Korea need to separated network suc... by ragonfly New Member in Splunk SOAR 03-03-2020 0 2	0	2