Splunk SOAR

MS Graph API duplicate email ingestion into Splunk SOAR

DeepthiNavuru
Engager

Hello,

Good day!

MS Graph API duplicate email ingestion into Splunk SOAR:  We have Splunk SOAR v 6.1.1, and the Graph API v3, the ingestion settings are polling selected to interval and every 4 minutes. We are noticing duplicate ticket/email ingestion every 4 minutes causing our playbook (label_change) to error out with Validation error and could not update the record Re: SOAR Could not update record due to Validation... - Splunk Community

Appreciate your guidance in advance!

 

Labels (1)
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...

Secure Your Future: Mastering Upgrade Readiness for Splunk 10

Spotlight: The Splunk Health Assistant Add-On  The Splunk Health Assistant Add-On is your ultimate companion ...

Observability Unlocked: Kubernetes & Cloud Monitoring with Splunk IM

Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team on ...