Splunk SOAR

Community Activity

Issue with Ingesting Splunk Notable Events into Splunk SOAR – Missing Fields like event_id Hello Team,I’ve been trying to ingest Splunk notable events into Splunk SOAR (Phantom), but I’m facing an issue where... by sgote New Member in Splunk SOAR 03-19-2025 0 1	0	1
Splunk SOAR access environment variables We have a playbook which is making calls to SOAR REST API artifacts endpoint.We are having to pass the auth token for... by JustntherSplker Explorer in Splunk SOAR 03-19-2025 0 1	0	1
API Filtering in Splunk SOAR - Access child elements in JSON Working on a use case which entails finding All containers/artifacts that match certain field conditions.The idea is ... by JustntherSplker Explorer in Splunk SOAR 03-09-2025 1 4	1	4
Container UPDATE - field open_time Hello Everyone,I'm trying to create a playbook that based on the message provided by the prompt action, will update t... by CMPC Engager in Splunk SOAR 03-05-2025 0 1	0	1
Workbook Source Control Has anyone managed to set up source control for workbooks? Pulling the information down via API to upload to gitlab i... by SOARt_of_Lost Path Finder in Splunk SOAR 03-05-2025 0 1	0	1
Updating a lookup in Splunk via a Splunk SOAR playbook Hello everyone,I am currently working on creating a Splunk SOAR playbook that collects variables from a case and appe... by Joei Engager in Splunk SOAR 02-24-2025 0 2	0	2
how to export JSON to CSV Hello All,New to SPLUNK SOAR. Is there a function or developed by someone where i am trying to export the JSON (outpu... by prasanthkota Engager in Splunk SOAR 02-20-2025 0 3	0	3
"Failed to bootstrap playbook repos" on clean install Running a clean install on RHEL 8.9, kernel version 4.18.0-553.34.1.el8_10.x86_64. Followed the instructions on the i... by intothelight Engager in Splunk SOAR 02-19-2025 0 1	0	1
How to downgrade SOAR to a previous version? 6.3.1 -> 6.2.2 I'm having some issues with my on-prem deployment of Splunk SOAR 6.3.1and would like to revert to 6.2.2. Should I jus... by mpc7zh Explorer in Splunk SOAR 02-19-2025 0 2	0	2
Is it possible to add line breaks or new lines when pasting multiple lines of text in the comment field? In the investigation panel for an incident in Splunk SOAR, there is a comment or command field under Activity. If yo... by kwatley New Member in Splunk SOAR 02-12-2025 0 0	0	0
Splunk Phantom: On Phantom: Verify server's 'Allowed IPs' and authorization configuration. I get this error when i attempt to add a server to the Splunk Phantom App on Splunk Enterprise. I have added the phan... by scc00 Contributor in Splunk SOAR 02-10-2025 0 21	0	21
Searching Indicators in SOAR We want to be able to easily search IOCs in SOAR.The Indicators tab is inconsistent. It shows IOCs for some but not a... by erinmartin Engager in Splunk SOAR 02-04-2025 0 0	0	0
SOAR Hello, I really need help. Why is the 'Create Server' button in the 'APPSplunk App for SOAR' disabled? After installi... by saraomd93 Path Finder in Splunk SOAR 02-04-2025 0 0	0	0
Error adding a Phantom Server configuration in the Phantom Splunk App. I am getting a 403 error when adding a new server configuration to the Phantom app in Splunk. "There was an error add... by aridday Engager in Splunk SOAR 02-04-2025 0 8	0	8
How to find save_progress logs I am troubleshooting an API failure for a Splunk SOAR app. I found that the response code and details of the API are ... by achintachak12 New Member in Splunk SOAR 02-03-2025 0 0	0	0
SOAR - Question regarding Prompt Hello,I have a question regarding the prompt action, is there any possibility to make the answer to a question that i... by CMPC Engager in Splunk SOAR 02-03-2025 0 2	0	2
Getting notification when App is down Hi, i've been wondering is there any method to get notifications when SOAR configured app is down. I am using On pre... by Gundalai_b New Member in Splunk SOAR 01-31-2025 0 0	0	0
Is the Splunk SOAR Community Edition different than the Enterprise Version with limitations? Hi all, I have been working with Splunk SOAR Community Edition for some time. Now I am wondering how the, is it calle... by saiiman Engager in Splunk SOAR 01-30-2025 1 2	1	2
Sending Alert results sid only to SOAR Hey there! I'm currently struggling to find a way to send the alert sid (commonly found under view results when using... by nongingerale Explorer in Splunk SOAR 01-29-2025 0 0	0	0
What happened if Splunk SOAR license expired? What happened if Splunk SOAR license expired?I cannot find a document to explain it. by karn Path Finder in Splunk SOAR 01-25-2025 0 3	0	3
Splunk SOAR support for RHEL 9 Hello, I am reaching out to inquire whether Splunk SOAR currently supports Red Hat Enterprise Linux 9 (RHEL9).We are ... by hiepdao Engager in Splunk SOAR 01-24-2025 0 2	0	2
Splunk SOAR(On-premises) 6.3.1 configuration Hello Splunk SOAR family, hope each of you is doing good. Can anyone has some tips when it comes to installing and co... by ND1 Explorer in Splunk SOAR 01-24-2025 0 3	0	3
How to install dependencies in SOAR Cloud Custom App Hi,I am now adding a new action "ingest excel" to the existing SOAR App CSV Import. Two dependencies are required to ... by annielee Explorer in Splunk SOAR 01-24-2025 0 3	0	3
Static Error in Splunk SOAR PR Getting following Static Errors in Splunk SOAR PR review from Bot.1. { "minimal_data_paths": { ... by himanshun-metro New Member in Splunk SOAR 01-21-2025 0 0	0	0
How to add multiple files in the vault to an archive Hey, So I have a playbook that fetches multiple files and adds them to the soar vault. I can then send each individua... by N_K Engager in Splunk SOAR 01-20-2025 0 1	0	1