Splunk SOAR

Community Activity

How can I download arbitrary files from the Internet using Phantom? I have written a custom code block that outputs URLs of files on the Internet that I'd like Phantom to download and u... by AlexBryant Path Finder in Splunk SOAR 12-10-2019 0 4	0	4
Get Status of completed Child Playbook Hi, I am just curious if anyone knows how to check on the completion status of a child playbook. For example: Playb... by geoffsheppard New Member in Splunk SOAR 11-20-2019 0 1	0	1
Phantom Play Book Editor, Debugger Problem. Please Help For all of the playbooks I have executed and tried to test in the past 24 hours, none of them have successfully execu... by johnteo Explorer in Splunk SOAR 11-17-2019 0 6	0	6
SMTP Error Debugger Hi guys, when I run and test the playbook editor I run into an error whereby the connection is unexpectedly closed. C... by johnteo Explorer in Splunk SOAR 11-15-2019 0 1	0	1
VPE Debugger Issue. No response on test Hi guys, for all of the playbooks I have executed and tried to test in the past 24 hours, none of them have successfu... by johnteo Explorer in Splunk SOAR 11-14-2019 0 4	0	4
Firewall Asset Settings Error Hi all, I would like some assistance on an error that I have encountered please. App 'Pala Alto Networks Firewall" s... by johnteo Explorer in Splunk SOAR 11-08-2019 0 1	0	1
Phantom integration giving the ssl error, how to disable them? I am seeing the below issue, Httpsconnectionpool(host='phantomdev..com', port=XXX): max retries exceeded with url: /r... by thirumaleshsplu Explorer in Splunk SOAR 11-04-2019 0 3	0	3
How to set the run_automation flag as a parameter? Hey All, I have a Splunk search that sends 50 Splunk Events into 1 Phantom container with 50 artifacts (one for each ... by dennis_rhodes New Member in Splunk SOAR 11-01-2019 0 2	0	2
Unable to use foreach or dummy encoding in Phantom Splunk queries? Splunk app for Phantom supports running a query on Splunk.I am trying to use foreach in my query, but the action fail... by bowesmana SplunkTrust in Splunk SOAR 11-01-2019 0 4	0	4
How do I delete events id automatically in Phantom? I want to delete events automatically in Phantom. I know that it can be deleted by hand like a picture. How do I w... by oda Communicator in Splunk SOAR 10-31-2019 0 1	0	1
Unable to see events in splunk phantom Hi all,I am very new to phantom. Its my first time dealing with it.I was trying to connect splunk instance to phantom... by bhavneeshvohra Engager in Splunk SOAR 10-31-2019 0 1	0	1
custom status update for notable event using phantom playbook Hi All, I have to update the notable event status using phantom. But the status are custom created ones , not the def... by kvswathi Path Finder in Splunk SOAR 10-31-2019 0 4	0	4
Errno 110 App ElasticSearch Configuration I have been trying to troubleshoot this error for the Elasicsearch application. However, with or without credentials ... by johnteo Explorer in Splunk SOAR 10-30-2019 0 1	0	1
Reversing Labb Testing Connectivity Failed Hi all, my attempt to set up reversing labs app in Splunk Phantom has run into an error. It says: Connectivity test... by johnteo Explorer in Splunk SOAR 10-24-2019 0 1	0	1
Configuring Apps Hello, I have encountered some issues with configuring applications on Splunk Phantom. How do I obtain API keys/URLs ... by johnteo Explorer in Splunk SOAR 10-24-2019 0 1	0	1
Unable to resolve host when cloning the azure devops repo Hello all, I am trying to clone the azure devops repo into the splunk phantom and getting the following error. Pl, ca... by pedavallis New Member in Splunk SOAR 10-24-2019 0 1	0	1
Phantom Requirements Hi everyone, I am having trouble locating the documentation on requirements for the hardware, system and network requ... by johnteo Explorer in Splunk SOAR 10-16-2019 0 1	0	1
splunk phantom install license key cli I was wondering if anyone knows how to install the phantom license key through the cli? Or potentially through some r... by ucz350 Path Finder in Splunk SOAR 10-14-2019 1 3	1	3
Splunk Phantom: How to append each username from LDAP query result into an email body and send? Results from LDAP query: user1user2 I want to send an email for each of this users with the below email body separate... by robertbuscato New Member in Splunk SOAR 09-26-2019 0 7	0	7
Phantom: How can I use a format block to format the results of a Splunk query? I am using Phantom to submit a Splunk query and I can get the results from the action_result.data artifact. Those res... by AlexBryant Path Finder in Splunk SOAR 09-22-2019 0 3	0	3
Phantom : Why are we getting the error "unable to forward this search result: unhashable type: 'dict'" ? We are trying to forward the events to phantom via datamodel export function. when we click on save and preview , we ... by sdubey_splunk Splunk Employee in Splunk SOAR 09-18-2019 0 2	0	2
Phantom app for Cisco Threat Response I searched for the Phantom app for Cisco Threat Response but was unable to find it in Phantom. If such Phantom app ex... by molehu Engager in Splunk SOAR 09-12-2019 0 0	0	0
Using Splunk Phantom post data to send data from Phantom back into Splunk Hi I am new to Splunk Phantom and have so far far Triggered an alert in SplunkThis send the data into PhantomPhantom ... by davidwaugh Path Finder in Splunk SOAR 09-10-2019 0 1	0	1
How do I perform field mapping between Splunk and Phantom when using Run playbook in Phantom ? Hello, I am using the action Run playbook in Phantom. Splunk can send the alert, but without fields created on Splu... by fati_ben_soar New Member in Splunk SOAR 08-28-2019 0 1	0	1
Splunk Phantom Using Splunk Phantomm app and trying to export saved data model filds that are INHERITED parsed and can be forwared b... by borisk95 New Member in Splunk SOAR 08-28-2019 0 1	0	1