Splunk SOAR

Splunk SOAR
Community Activity
ucz350
Hi, Trying to post the token and servername from the Phantomserver, into the Phantom app on the Splunk-server. This a...
by ucz350 Path Finder in Splunk SOAR 03-04-2020
0 3
0
3
ragonfly
Hello. I wonder about the configuration of phantom. Question 1.Most of company in Korea need to separated network suc...
by ragonfly New Member in Splunk SOAR 03-03-2020
0 2
0
2
kwells0479
We have been working on getting an installation of phantom running in a centos:7 docker container using rpm, but are...
by kwells0479 Explorer in Splunk SOAR 02-13-2020
0 4
0
4
dphegarty
I have a top level playbook that calls two playbooks, on that does some analysis and the second one that promotes the...
by dphegarty New Member in Splunk SOAR 02-07-2020
0 1
0
1
leomeyerovich
We have a python script that basically does "ip address -> ... python-generated splunk calls + viz api calls -> url o...
by leomeyerovich Explorer in Splunk SOAR 01-31-2020
0 0
0
0
leomeyerovich
When looking at the result of a Phantom automation, say on IP1 & IP2 + User1 & User2, we'd like to also have a table ...
by leomeyerovich Explorer in Splunk SOAR 01-31-2020
0 0
0
0
buzz_gt
Question: Are there any locking or concurrency guarantees when playbooks are operating on a container? Issue I am try...
by buzz_gt New Member in Splunk SOAR 01-31-2020
0 0
0
0
flogo
Hello, I'm using the QRadar integration on Phantom, and we can define the mapping between Phantom and QRadar.I got an...
by flogo New Member in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and remediate phishing emails?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to hunt for threats?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to protect an EC2 group from malicious traffic?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to determine if an IP address is malicious?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to automatically contain malicious insiders?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and remediate malware infections?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to prompt an analyst to block an endpoint?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and contain ransomware?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
stevenaung
Hi all, I was testing out phanom to contain malicious IPs with my perimeter FWs.The problem is that it only block as ...
by stevenaung New Member in Splunk SOAR 01-29-2020
0 0
0
0
kyung123a
Event coming from QRadar is missing artifact. What should I check? If you need mapping,How do I map between phantom a...
by kyung123a New Member in Splunk SOAR 01-28-2020
0 0
0
0
waleksandrowski
I have a problem with integration of Phantom with RSA Netwitness. When I try to test connectivity with "RSA Security ...
by waleksandrowski New Member in Splunk SOAR 01-15-2020
0 0
0
0
divya1388
Hi, I have registered for the community edition of Phanthom on 01/13/2020. I have not received any email regarding re...
by divya1388 Explorer in Splunk SOAR 01-14-2020
0 2
0
2
4A616D6573
Hi, I've setup the Phantom App for Splunk and API is connected successfully. So far I've set up some test Saved Searc...
by 4A616D6573 Explorer in Splunk SOAR 01-10-2020
0 4
0
4
maxywalker1
We currently use Cofense Report Phishing to provide users with the ability to report potential phishing emails. When ...
by maxywalker1 Explorer in Splunk SOAR 01-07-2020
0 3
0
3
salexander8
Is there any timeline for support in Splunk 8.Having installed the latest version available - 2.7.5 I just get an 'In...
by salexander8 Engager in Splunk SOAR 01-07-2020
0 1
0
1
adil13
I have registered for Splunk Phantom Community edition for but I have not received any response. Is there anybody can...
by adil13 New Member in Splunk SOAR 12-22-2019
0 2
0
2
ansusabu
While starting the Phantom server we are receiving the following error: "psql: ERROR: pgbouncer cannot connect to ser...
by ansusabu Communicator in Splunk SOAR 12-16-2019
0 3
0
3
Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...
Top Solution Authors