Splunk SOAR

Community Activity

	How to block incoming traffic (source ip at FW policy) with phantom check point/ fortinet apps? Hi all, I was testing out phanom to contain malicious IPs with my perimeter FWs.The problem is that it only block as ... by stevenaung New Member in Splunk SOAR 01-29-2020 0 0	0	0
	Artifact is missing in event coming from QRadar Event coming from QRadar is missing artifact. What should I check? If you need mapping,How do I map between phantom a... by kyung123a New Member in Splunk SOAR 01-28-2020 0 0	0	0
	Phantom integration with RSA Netwitness I have a problem with integration of Phantom with RSA Netwitness. When I try to test connectivity with "RSA Security ... by waleksandrowski New Member in Splunk SOAR 01-15-2020 0 0	0	0
	Splunk Phantom Community Edition Approval Pending Hi, I have registered for the community edition of Phanthom on 01/13/2020. I have not received any email regarding re... by divya1388 Explorer in Splunk SOAR 01-14-2020 0 2	0	2
	Event Forwarding Not Extracting Fields with Saved Search Exports Hi, I've setup the Phantom App for Splunk and API is connected successfully. So far I've set up some test Saved Searc... by 4A616D6573 Explorer in Splunk SOAR 01-10-2020 0 4	0	4
	Cofense Report Phishing - Extract zip files We currently use Cofense Report Phishing to provide users with the ability to report potential phishing emails. When ... by maxywalker1 Explorer in Splunk SOAR 01-07-2020 0 3	0	3
	When will support for Splunk 8.x be added. Is there any timeline for support in Splunk 8.Having installed the latest version available - 2.7.5 I just get an 'In... by salexander8 Engager in Splunk SOAR 01-07-2020 0 1	0	1
	Splunk Phantom Community Edition I have registered for Splunk Phantom Community edition for but I have not received any response. Is there anybody can... by adil13 New Member in Splunk SOAR 12-22-2019 0 2	0	2
	Not able to start Phantom While starting the Phantom server we are receiving the following error: "psql: ERROR: pgbouncer cannot connect to ser... by ansusabu Communicator in Splunk SOAR 12-16-2019 0 3	0	3
	Phantom Custom Code Alarm Hi guys I have been trying to make a alarm ring every time the playbook executes. However, when trying to do it with ... by johnteo Explorer in Splunk SOAR 12-16-2019 0 10	0	10
	Customizable Sound of Phantom Hi guys, is there a way to trigger a customizable sound as part of the Phantom Playbook whenever it runs automaticall... by johnteo Explorer in Splunk SOAR 12-11-2019 0 1	0	1
	How can I download arbitrary files from the Internet using Phantom? I have written a custom code block that outputs URLs of files on the Internet that I'd like Phantom to download and u... by AlexBryant Path Finder in Splunk SOAR 12-10-2019 0 4	0	4
	Get Status of completed Child Playbook Hi, I am just curious if anyone knows how to check on the completion status of a child playbook. For example: Playb... by geoffsheppard New Member in Splunk SOAR 11-20-2019 0 1	0	1
	Phantom Play Book Editor, Debugger Problem. Please Help For all of the playbooks I have executed and tried to test in the past 24 hours, none of them have successfully execu... by johnteo Explorer in Splunk SOAR 11-17-2019 0 6	0	6
	SMTP Error Debugger Hi guys, when I run and test the playbook editor I run into an error whereby the connection is unexpectedly closed. C... by johnteo Explorer in Splunk SOAR 11-15-2019 0 1	0	1
	VPE Debugger Issue. No response on test Hi guys, for all of the playbooks I have executed and tried to test in the past 24 hours, none of them have successfu... by johnteo Explorer in Splunk SOAR 11-14-2019 0 4	0	4
	Firewall Asset Settings Error Hi all, I would like some assistance on an error that I have encountered please. App 'Pala Alto Networks Firewall" s... by johnteo Explorer in Splunk SOAR 11-08-2019 0 1	0	1
	Phantom integration giving the ssl error, how to disable them? I am seeing the below issue, Httpsconnectionpool(host='phantomdev..com', port=XXX): max retries exceeded with url: /r... by thirumaleshsplu Explorer in Splunk SOAR 11-04-2019 0 3	0	3
	How to set the run_automation flag as a parameter? Hey All, I have a Splunk search that sends 50 Splunk Events into 1 Phantom container with 50 artifacts (one for each ... by dennis_rhodes New Member in Splunk SOAR 11-01-2019 0 2	0	2
	Unable to use foreach or dummy encoding in Phantom Splunk queries? Splunk app for Phantom supports running a query on Splunk.I am trying to use foreach in my query, but the action fail... by bowesmana SplunkTrust in Splunk SOAR 11-01-2019 0 4	0	4
	How do I delete events id automatically in Phantom? I want to delete events automatically in Phantom. I know that it can be deleted by hand like a picture. How do I w... by oda Communicator in Splunk SOAR 10-31-2019 0 1	0	1
	Unable to see events in splunk phantom Hi all,I am very new to phantom. Its my first time dealing with it.I was trying to connect splunk instance to phantom... by bhavneeshvohra Engager in Splunk SOAR 10-31-2019 0 1	0	1
	custom status update for notable event using phantom playbook Hi All, I have to update the notable event status using phantom. But the status are custom created ones , not the def... by kvswathi Path Finder in Splunk SOAR 10-31-2019 0 4	0	4
	Errno 110 App ElasticSearch Configuration I have been trying to troubleshoot this error for the Elasicsearch application. However, with or without credentials ... by johnteo Explorer in Splunk SOAR 10-30-2019 0 1	0	1
	Reversing Labb Testing Connectivity Failed Hi all, my attempt to set up reversing labs app in Splunk Phantom has run into an error. It says: Connectivity test... by johnteo Explorer in Splunk SOAR 10-24-2019 0 1	0	1