Splunk SOAR

Phantom: How to generate a report on cases that are created ?

mkrishnan
Engager

Team,

I am looking for a way to generate a summary report on cases that we have in Phantom ? Which will include case ID, case name, Assignee, Start data, end date , status etc.

I dont find an option to generate such reports in Phantom GUI currently. Please help me if anybody found any solution for this.
I am looking for ways to pull data with the help of Rest API. Please post if anyone has worked on this so far ?

Thank you,
MK

Labels (1)
Tags (1)

rplas
Explorer

There currently isn't a great way to generate custom reports from the UI but I think getting data from the API and building your own report generator is the way to go.

Documentation for the REST API can be found here: https://docs.splunk.com/Documentation/Phantom/4.8/PlatformAPI/Using

The Container API documentation can be found here: https://docs.splunk.com/Documentation/Phantom/4.8/PlatformAPI/RESTContainers

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes & Cloud Monitoring with Splunk IM

Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team on ...

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...