Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
514 results
Sort by:
10-03-2025
05:36 PM
Hello Everyone, Could you please clarify the difference between the SOAR and Phantom Product?
Labels
- Labels:
-
using SOAR ⁄ Phantom
09-24-2025
11:12 PM
...he below custom code in Splunk SOAR, it always returns an error "HTTP 400 Bad Request -- Error in 'rex' command: Encountered the following error while compiling the regex '(?P<fileName>[^\\]+)$': R...
Labels
- Labels:
-
field extraction
-
other
-
regex
-
rex
01-19-2022
07:18 AM
Hi guys I tried installing Splunk Phantom as an underprivileged user as per the documentation: https://docs.splunk.com/Documentation/SOARonprem/5.0.1/Install/InstallUnprivileged Although I p...
Labels
- Labels:
-
installation
-
using SOAR ⁄ Phantom
06-22-2022
08:29 AM
Hello,
I am trying to find a native solution in order to monitor the execution of a Phantom Playbook. In case one of the actions fail, or a specific message/data is returned by a custom function, d...
Labels
08-31-2020
01:14 AM
Can one use Splunk phantom for auto-remediation? What real-life use cases are applicable to the use of Phantom?
Labels
- Labels:
-
using Phantom
04-11-2019
09:06 AM
I am getting a 403 error when adding a new server configuration to the Phantom app in Splunk.
"There was an error adding the server configuration. Verify server's 'Allowed IPs' and authorization c...
Labels
- Labels:
-
configuration
02-14-2023
01:54 PM
I'm currently adding notes through a playbook via Python automation. I'll have a formatted string:
f'<a href="https://www.url.com"> Link Label </a>'
&nbs...
Labels
- Labels:
-
development
-
using SOAR ⁄ Phantom
02-25-2020
02:57 AM
1 Karma
Good morning,
I woud like to test Splunk Phantom Community Edition in my home lab. When I try to install it following the documentation, the following error appears:
About to proceed with Phantom...
- Tags:
- phantom
Labels
- Labels:
-
installation
-
troubleshooting
Show results in replies (3)
-
The Community Edition of Splunk>Phantom can only be installed via the OVA available on the m...
-
...ttps://community.splunk.com/t5/Splunk-Phantom/About-to-install-Splunk-Phantom-Community-Edition/td-p/482679
-
...rovide your Splunk Phantom community credentials when prompted for a username and password. Basic c...
02-03-2022
06:40 AM
i have Multiple event forwardings enabled on my Phantom App for Splunk that use saved searches to trigger notable events to phantom. I had recently we upgraded the App from ver 4.0.35 to 4.1.73...
Labels
07-09-2018
02:59 AM
1 Karma
Hi. I don't understand how to fix it.
App: Phantom -> Phantom Server Configuration: Error loading Phantom Server Configurations: You must have phantom_read, phantom_write and a...
Labels
- Labels:
-
troubleshooting
-
using Phantom
Show results in replies (7)
-
...ith HTTPS certificate verification. Try: %splunk_home%/etc/apps/phantom/local/phantom [v...
-
...Ps' and authorization configuration. Error talking to Splunk: POST /servicesNS/nobody/phantom/s...
-
for clarity, the path is: %splunk_home%/etc/apps/phantom/local/phantom.conf
-
....0.1:8089/servicesNS/nobody/phantom/configs/conf-phantom?count=-1&output_mode=json" can a...
-
One other thing that tripped me up: add your Splunk server IPs to the Allowed IPs list of the Phantom...
-
...etails > Export Copy this to your Splunk ,machine in $SPLUNK_HOME/etc/apps/phantom/local/c...
-
I'm seeing the same thing. I am new to Splunk and Phantom and wanted to setup a POC using the f...
