Splunk SOAR

Community Activity

Subject: Alerts Not Reaching Splunk SOAR via App-to-App Connection from Splunk Hi everyone,I'm working on integrating Splunk Enterprise with Splunk SOAR using the Splunk App for SOAR Export, and I... by Ramachandran Explorer in Splunk SOAR 05-23-2025 0 1	0	1
Issue with event_id Not Appearing When Sending Events from Splunk ES to SOAR Description:Hello,I am experiencing an issue with the "event_id" field when transferring notable events from Splunk E... by kn450 Explorer in Splunk SOAR 05-21-2025 0 2	0	2
How to block outgoing traffic with the SOAR app for Microsoft Defender for Endpoint We're looking to block outgoing traffic from a specific client or group, using the Microsoft Defender for Endpoint-ap... by 1var Engager in Splunk SOAR 05-07-2025 0 1	0	1
Limit on ingesting data into SOAR Hi team,I have a question related to Splunk SOAR. I'm working on a new community app that will include an on-poll act... by Kesha New Member in Splunk SOAR 04-22-2025 0 0	0	0
SPLUNK SOAR WHOIS RDP PROXY testing Connectivit Hi Team,Proxy connectivity test for WHOIS RDP is failing on SPLUNK SOAR UI. Testing Connectivity App 'WHOIS RDAP' sta... by lalithasegu Observer in Splunk SOAR 04-21-2025 0 0	0	0
Need help with SOAR custom lists -- rows versus column updates I have a list of email addresses being returned by a query that I want to use to update a custom list. My goal is to ... by RobertCEG Observer in Splunk SOAR 04-14-2025 0 1	0	1
Multiple artifacts being added to one container Using the Splunk App for SOAR I am creating events in SOAR using a dashboard in Splunk. I'm facing an issue where the... by N_K Engager in Splunk SOAR 04-13-2025 0 3	0	3
phantom.collect2(): Error Hello friends, while debugging a Playbook action number one, I want to run a query like the following and get the res... by saraomd93 Path Finder in Splunk SOAR 04-13-2025 0 1	0	1
SOAR101 question regarding passing variables Just getting started with SOAR and I am encountering a scenario where I obviously don't understand the concept enough... by NuttyBrown Engager in Splunk SOAR 04-12-2025 0 1	0	1
Issue with Ingesting Splunk Notable Events into Splunk SOAR – Missing Fields like event_id Hello Team,I’ve been trying to ingest Splunk notable events into Splunk SOAR (Phantom), but I’m facing an issue where... by sgote New Member in Splunk SOAR 03-19-2025 0 1	0	1
Splunk SOAR access environment variables We have a playbook which is making calls to SOAR REST API artifacts endpoint.We are having to pass the auth token for... by JustntherSplker Explorer in Splunk SOAR 03-19-2025 0 1	0	1
API Filtering in Splunk SOAR - Access child elements in JSON Working on a use case which entails finding All containers/artifacts that match certain field conditions.The idea is ... by JustntherSplker Explorer in Splunk SOAR 03-09-2025 1 4	1	4
Container UPDATE - field open_time Hello Everyone,I'm trying to create a playbook that based on the message provided by the prompt action, will update t... by CMPC Engager in Splunk SOAR 03-05-2025 0 1	0	1
Workbook Source Control Has anyone managed to set up source control for workbooks? Pulling the information down via API to upload to gitlab i... by SOARt_of_Lost Path Finder in Splunk SOAR 03-05-2025 0 1	0	1
Updating a lookup in Splunk via a Splunk SOAR playbook Hello everyone,I am currently working on creating a Splunk SOAR playbook that collects variables from a case and appe... by Joei Engager in Splunk SOAR 02-24-2025 0 2	0	2
how to export JSON to CSV Hello All,New to SPLUNK SOAR. Is there a function or developed by someone where i am trying to export the JSON (outpu... by prasanthkota Engager in Splunk SOAR 02-20-2025 0 3	0	3
"Failed to bootstrap playbook repos" on clean install Running a clean install on RHEL 8.9, kernel version 4.18.0-553.34.1.el8_10.x86_64. Followed the instructions on the i... by intothelight Engager in Splunk SOAR 02-19-2025 0 1	0	1
How to downgrade SOAR to a previous version? 6.3.1 -> 6.2.2 I'm having some issues with my on-prem deployment of Splunk SOAR 6.3.1and would like to revert to 6.2.2. Should I jus... by mpc7zh Explorer in Splunk SOAR 02-19-2025 0 2	0	2
Is it possible to add line breaks or new lines when pasting multiple lines of text in the comment field? In the investigation panel for an incident in Splunk SOAR, there is a comment or command field under Activity. If yo... by kwatley New Member in Splunk SOAR 02-12-2025 0 0	0	0
Splunk Phantom: On Phantom: Verify server's 'Allowed IPs' and authorization configuration. I get this error when i attempt to add a server to the Splunk Phantom App on Splunk Enterprise. I have added the phan... by scc00 Contributor in Splunk SOAR 02-10-2025 0 21	0	21
Searching Indicators in SOAR We want to be able to easily search IOCs in SOAR.The Indicators tab is inconsistent. It shows IOCs for some but not a... by erinmartin Engager in Splunk SOAR 02-04-2025 0 0	0	0
SOAR Hello, I really need help. Why is the 'Create Server' button in the 'APPSplunk App for SOAR' disabled? After installi... by saraomd93 Path Finder in Splunk SOAR 02-04-2025 0 0	0	0
Error adding a Phantom Server configuration in the Phantom Splunk App. I am getting a 403 error when adding a new server configuration to the Phantom app in Splunk. "There was an error add... by aridday Engager in Splunk SOAR 02-04-2025 0 8	0	8
How to find save_progress logs I am troubleshooting an API failure for a Splunk SOAR app. I found that the response code and details of the API are ... by achintachak12 New Member in Splunk SOAR 02-03-2025 0 0	0	0
SOAR - Question regarding Prompt Hello,I have a question regarding the prompt action, is there any possibility to make the answer to a question that i... by CMPC Engager in Splunk SOAR 02-03-2025 0 2	0	2