Splunk Version: 7.1.2 Phantom App for Splunk Version: 2.5.23 My alerts are being triggered successfully, but there is an error sending to Phantom. In /opt/splunk/var/log/splunk/phantom_forwarding.log I get the following line: phantom_forward:109 - /opt/splunk/etc/apps/phantom/bin/scripts/phantom_forward.py called without the correct set of parameters. and the lines of code in question are: if len(sys.argv) < 9: logger = PhantomConfig.get_logger('forwarding') logger.error('{} called without the correct set of parameters.'.format(sys.argv[0])) sys.exit(0) With some digging I've determined that sys.argv in this case is an array with one item which is the name of the file. I'm wondering if this is caused by an error on my part (misconfigured alert?) or maybe a bug in the Phantom app code. ... View more