About msayar

msayar · ‎02-23-2023

Thanks Mike! That is your SOAR instance until you either upgrade or decide to let it expire in six months. If you upgrade, you can designate the name of the stack. If it expires, it will go away

msayar · ‎12-15-2022

Yes there is: 1. From the Owner dropdown, select your name: 2. Under the search bar, click Save 3. Then you can select the saved filter on the top-right:

msayar · ‎12-15-2022

Hey Mike, it's on the roadmap!

msayar · ‎09-13-2022

Yes it is! One of the main goals for MC is to be a one-stop-shop providing an analyst all the information they need to make a decision on how to respond to incidents. Part of that goal is enriching the incident with information from various sources. You'll see that coming as Mission Control continues to evolve. If you'd like more information, feel free to reach out to your account team for a roadmap review

msayar · ‎09-08-2022

Yup, it's a bug! Thanks for bringing it to our attention. We'll fix it in one of our next updates.

msayar · ‎09-06-2022

Hey Mike, does the Incident Type Matching Macro work when you use it in Search? Do you have permissions to see the Incident Type you created?

msayar · ‎05-24-2022

You can see an example preprocess script for another app here. You can get debug logging by using the function self.debug_print("sup")

Posts	10
Solutions	4
Karma Given	1
Karma Received	7
Member Since	‎11-05-2021

Online Status	Offline
Date Last Visited	‎02-28-2023 03:43 PM

SOAR Splunk Apps are Getting a Facelift

All SOAR Apps are Open Source!

SOAR Apps Are Moving

Re: Built-in SOAR instance

Re: Is there a filter or can I create one so that ...

Re: Mission Control: Can you send Incidents to ano...

Re: Asset context and/or integration with asset ma...

Re: Incident Type and Response Task not auto assig...

Re: Incident Type and Response Task not auto assig...

Re: Search any info on preprocess script

Are you a member of the Splunk Community?