Splunk SOAR

Community Activity

Send to SOAR Failure from Mission Control Hi Everyone, I am experiencing an error when sending events from Mission Control to Splunk SOAR. I always get a failu... by zksvc Contributor in Splunk SOAR 06-23-2025 0 3	0	3
Infoblox DDI connectivity issue when testing App 'Infoblox DDI' started successfully (id: 1725978494606) on asset: 'infoblox-enterprise'(id: 25)Loaded action exec... by damianpadden Loves-to-Learn in Splunk SOAR 06-16-2025 0 1	0	1
Setting event status to close when playbook is triggered by case I have promote multiple events into a case. From the case, I will run a playbook. I understand that I can use the fol... by shangxuan_shi Explorer in Splunk SOAR 06-06-2025 0 0	0	0
Joining 2 code blocks to an action. Will encounter "unexpected-keyword-arg" error I have not encounter this error previously. When I join two code block to an action block using the visual editor. A ... by shangxuan_shi Explorer in Splunk SOAR 06-06-2025 0 6	0	6
Sending User Defined Variables to Action Block I am new to Splunk SOAR and I have a custom python code block that I am creating and exporting a variable to a Splunk... by ma620k Engager in Splunk SOAR 06-03-2025 0 5	0	5
Install Splunk App for SOAR and Splunk App for SOAR Export I am trying to install the Splunk App for SOAR and Splunk App for SOAR Export , however facing the issue as belowI am... by kamal18sharma Engager in Splunk SOAR 06-02-2025 0 2	0	2
result from value field in playbook is none hai, i have a problem with field in playbook I’m building a SOAR playbook to check network traffic to Active Director... by ASEP Engager in Splunk SOAR 06-02-2025 0 1	0	1
Splunk SOAR Supplies status invalid in result Hi i want create simple playbook to detect data from Incident Response it can send to SOAR to automate analyze like V... by zksvc Contributor in Splunk SOAR 05-30-2025 0 3	0	3
Cannot delete the imported playbook When importing playbooks from the Splunk Research repository https://research.splunk.com/playbooks/ the imported pla... by zksvc Contributor in Splunk SOAR 05-30-2025 0 3	0	3
Subject: Alerts Not Reaching Splunk SOAR via App-to-App Connection from Splunk Hi everyone,I'm working on integrating Splunk Enterprise with Splunk SOAR using the Splunk App for SOAR Export, and I... by Ramachandran Explorer in Splunk SOAR 05-23-2025 0 1	0	1
Issue with event_id Not Appearing When Sending Events from Splunk ES to SOAR Description:Hello,I am experiencing an issue with the "event_id" field when transferring notable events from Splunk E... by kn450 Explorer in Splunk SOAR 05-21-2025 0 2	0	2
How to block outgoing traffic with the SOAR app for Microsoft Defender for Endpoint We're looking to block outgoing traffic from a specific client or group, using the Microsoft Defender for Endpoint-ap... by 1var Engager in Splunk SOAR 05-07-2025 0 1	0	1
Limit on ingesting data into SOAR Hi team,I have a question related to Splunk SOAR. I'm working on a new community app that will include an on-poll act... by Kesha New Member in Splunk SOAR 04-22-2025 0 0	0	0
SPLUNK SOAR WHOIS RDP PROXY testing Connectivit Hi Team,Proxy connectivity test for WHOIS RDP is failing on SPLUNK SOAR UI. Testing Connectivity App 'WHOIS RDAP' sta... by lalithasegu New Member in Splunk SOAR 04-21-2025 0 0	0	0
Need help with SOAR custom lists -- rows versus column updates I have a list of email addresses being returned by a query that I want to use to update a custom list. My goal is to ... by RobertCEG Observer in Splunk SOAR 04-14-2025 0 1	0	1
Multiple artifacts being added to one container Using the Splunk App for SOAR I am creating events in SOAR using a dashboard in Splunk. I'm facing an issue where the... by N_K Engager in Splunk SOAR 04-13-2025 0 3	0	3
phantom.collect2(): Error Hello friends, while debugging a Playbook action number one, I want to run a query like the following and get the res... by saraomd93 Path Finder in Splunk SOAR 04-13-2025 0 1	0	1
SOAR101 question regarding passing variables Just getting started with SOAR and I am encountering a scenario where I obviously don't understand the concept enough... by NuttyBrown Engager in Splunk SOAR 04-12-2025 0 1	0	1
Issue with Ingesting Splunk Notable Events into Splunk SOAR – Missing Fields like event_id Hello Team,I’ve been trying to ingest Splunk notable events into Splunk SOAR (Phantom), but I’m facing an issue where... by sgote New Member in Splunk SOAR 03-19-2025 0 1	0	1
Splunk SOAR access environment variables We have a playbook which is making calls to SOAR REST API artifacts endpoint.We are having to pass the auth token for... by JustntherSplker Explorer in Splunk SOAR 03-19-2025 0 1	0	1
API Filtering in Splunk SOAR - Access child elements in JSON Working on a use case which entails finding All containers/artifacts that match certain field conditions.The idea is ... by JustntherSplker Explorer in Splunk SOAR 03-09-2025 1 4	1	4
Container UPDATE - field open_time Hello Everyone,I'm trying to create a playbook that based on the message provided by the prompt action, will update t... by CMPC Engager in Splunk SOAR 03-05-2025 0 1	0	1
Workbook Source Control Has anyone managed to set up source control for workbooks? Pulling the information down via API to upload to gitlab i... by SOARt_of_Lost Path Finder in Splunk SOAR 03-05-2025 0 1	0	1
Updating a lookup in Splunk via a Splunk SOAR playbook Hello everyone,I am currently working on creating a Splunk SOAR playbook that collects variables from a case and appe... by Joei Engager in Splunk SOAR 02-24-2025 0 2	0	2
how to export JSON to CSV Hello All,New to SPLUNK SOAR. Is there a function or developed by someone where i am trying to export the JSON (outpu... by prasanthkota Engager in Splunk SOAR 02-20-2025 0 3	0	3