Hi guys I tried installing SplunkPhantomas an underprivileged user as per the documentation: https://docs.splunk.com/Documentation/SOARonprem/5.0.1/Install/InstallUnprivileged Although I p...
Hello,
I am trying to find a native solution in order to monitor the execution of aPhantom Playbook. In case one of the actions fail, or a specific message/data is returned by a custom function, d...
I am getting a 403 error when adding a new server configuration to the Phantomapp inSplunk.
"There was an error adding the server configuration. Verify server's 'Allowed IPs' and authorization c...
Good morning,
I woud like to test SplunkPhantom Community Edition in my home lab. When I try to install it following the documentation, the following error appears:
About to proceed with Phantom...
i have Multiple event forwardings enabled on my PhantomApp for Splunk that use saved searches to trigger notable events to phantom. I had recently we upgraded the App from ver 4.0.35 to 4.1.73...
Hi. I don't understand how to fix it.
App: Phantom -> Phantom Server Configuration: Error loading Phantom Server Configurations: You must have phantom_read, phantom_write and a...
Hi, I have registered for SplunkPhantom Community edition download 4 days ago. However, still the approval is pending and i didn't received link so far. Please let me know how do i get the link f...
I want the below audit information from Phantom server ingested into Splunk ES and how to retrieve it? 1) Login Success
Failure
I can see only login and logout information in : /var/log/phantom...