×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
ansusabu_25
Explorer
Member since: ‎09-28-2020
‎02-28-2024
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎09-28-2020
View All

Re: playbook running multiple times on single cont...

by in Splunk SOAR
‎02-28-2024 08:35 AM
‎02-28-2024 08:35 AM
We are not ES app. This option is for es app right? We are forwarding the alerts from splunk to soar using soar export app ... View more

Re: playbook running multiple times on single cont...

by in Splunk SOAR
‎02-27-2024 08:19 PM
‎02-27-2024 08:19 PM
I have tried the option to set the tag. But the problem is by the time the 1st artifact set the tag, the 2nd one have already completed the decision block and hence it repeats the playbook ... View more

playbook running multiple times on single containe...

by in Splunk SOAR
‎02-27-2024 09:32 AM
1 Karma
‎02-27-2024 09:32 AM
1 Karma
Using SOAR export app in Splunk, we are pulling certain alerts to SOAR. Depending on the ip, the artifacts are grouped to a single container. Now I need to create 1 ticket for each container using playbook. But what happens is that if the container is having multiple artifacts, it creates 1 ticket for each artifact. Any idea on how to solve this? Phantom  Splunk App for SOAR Export  ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎02-28-2024 11:56 AM
Karma from
View All