×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
jjkel
Observer
Member since: Monday
yesterday
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎08-24-2026
View All

Re: Trying to use .* as input parameter of an acti...

by in Splunk SOAR
yesterday
yesterday
Thanks @phanTom . Yeah, I tried with format block .* output and looking at the format block result seems like it doesn't parse it through properly: formatted data: ['domain1','domain2'] formatted data.*: 0:  ['domain1','domain2'] ... View more

Trying to use .* as input parameter of an action w...

by in Splunk SOAR
Monday
Monday
Successful when using finding:consolidated_findings.example.0 or finding:consolidated_findings.example.1 but not when using finding:consolidated_findings.example.* as input parameter. Using only finding:consolidated_findings.example returns ['domain1', 'domain2'] as parameter. Is there a way to send multiple values as parameter without having to create another playbook just to loop through nth? ... View more
Contact Me
Online Status
Offline
Date Last Visited
yesterday