Splunk SOAR

phantom vault different filenames with same content have same vaultid

sunilpanda023
Path Finder

hi phantom team,
I have a simple use case to rename a filename in vault.
As its immutable, I copied the contents to vault temp dir and renamed it there. And before adding the renamed file into vault, I did vault delete for existing vault id.
Still I get aka : [ old name , new name] in vault info for new file added to vault. And strange thing is it gets the same vault id.

Thanks,
Sunil


Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...