cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
kavitav
Splunk Employee
Member since: ‎08-09-2022
‎12-01-2022
Community Statistics
Posts 5
Solutions 0
Karma Given 0
Karma Received 3
Member Since ‎08-09-2022
Activity Feed
Topics I've Started
View All

Re: Preview 2 & limited SOAR functions

by Splunk Employee in Splunk Mission Control
‎12-01-2022 12:51 PM
‎12-01-2022 12:51 PM
Hi Mike, Hmm I haven't received it - can you resend to kvaradarajan@splunk.com? Thanks, Kavita ... View more

Re: Preview 2 & limited SOAR functions

by Splunk Employee in Splunk Mission Control
‎11-30-2022 08:26 AM
‎11-30-2022 08:26 AM
Hey Mike! You're not wrong! You should be able to run up to 100 actions per day. Can you share a screenshot of what you see when you click run action? We will look into this now. Thanks! ... View more

Re: Incident Type and Response Task not auto assig...

by Splunk Employee in Splunk Mission Control
‎09-09-2022 05:55 AM
‎09-09-2022 05:55 AM
@mikerennie The Incident Type Matching Macro points to an overall macro which will determine incident type of the incident. This is to facilitate hierarchy of conditions across incident types. Therefore the query must define each incident type, not just the one being edited currently. We recognize that this is actually not intuitive in the current UI and will be working to update this. Thanks for calling it out! A sample is below: eval incident_type=case(risk_event_count>20, "incident_type_1", urgency=="medium", "incident_type_2") Let us know if this is helpful. Happy to jump on a call to talk more! ... View more

Re: Failed to create a test incident

by Splunk Employee in Splunk Mission Control
‎09-06-2022 08:32 AM
‎09-06-2022 08:32 AM
Hi! Thanks for trying out the app! We are looking into the error now, just so I understand, is the user you are trying to assign here yourself? or is it another user who today has access to ES? Thanks!  ... View more

What is Mission Control?

by Splunk Employee in Splunk Mission Control
‎08-24-2022 01:16 PM
3 Karma
‎08-24-2022 01:16 PM
3 Karma
Mission Control (MC), currently in Preview, is a security operations application from Splunk Security. When all features are released, it will unify capabilities from Splunk Core, Enterprise Security, SOAR, and Threat Intelligence Management.  This release of Mission Control, known as “Preview 1”, provides the initial infrastructure for the app, the ingestion framework to move ES incidents into MC, and the framework for response capabilities via a feature called Response Templates.  It is a great way to see how the product is shaping up and what the fundamentals of Mission Control look like! Check out the docs here for more info! https://docs.splunk.com/Documentation/MC/Preview/   Note that the app is currently in an early release preview.  ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎12-01-2022 04:15 PM
Karma from