Not sure if this is a limitation of Phantom prompt block or if someone has figured this out already.
I am using a prompt block to allow a user build up a config file that will eventually be sent to Splunk to create a saved search. The questions allow the user to select specific values for fields to generate the metadata necessary for the splunk saved search (splunk query, time fields, eval fields, etc).
The response type for the question is a list of choices. There are two choices:
The existing field value (which comes from the config file that was pulled via prior action call)
CHANGE (which would be selected when the value needs to be changed)
When using the response type 'list', is there a way to have #1 be set as the default response? Therefore, you would only have to select CHANGE from the drop down, rather than having to select the existing field's value every time if it doesn't need changed.
... View more