Splunk SOAR

phantom.collect2(): Error

saraomd93
Path Finder

Hello friends, while debugging a Playbook action number one, I want to run a query like the following and get the result using the Splunk app, but I encounter the following error:

Apr 13, 11:33:40 : phantom.collect2(): Error: Cannot fetch results from the database without a block name

Capture.PNG

Labels (1)
0 Karma

marnall
Motivator

This usually means that something in your playbook is referencing a term that does not exist, like a misnamed block or a nonexistent datapath. If you are certain that the error originates from this Splunk app block, then you could try setting all of the inputs to be formatted text (as you did with the query input) so that SOAR does not think it could be a datapath.

Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...