About ND1

ND1

Hello family, please does anyone knows or has sources that explains how to use or built custom functions in Splunk SOAR?

ND1

Thanks, I really do appreciate!

ND1

Thanks for feedback I really do appreciate!

ND1

Thanks, I appreciate it!

ND1

Why is my Correlation Search not showing up in Incident Review?” “How do I determine why a Correlation Search isn’t creating a notable event?”

ND1

Hello family, here is a concern I am experiencing: I have correlation searches that are activated or enable, and to verify that they are receiving CIM-compliant data that are required to make it work, when I search their name one-by-one on a Splunk Enterprise Security dashboard pane to make sure the dashboard populates properly, nothing comes out. But when I run the query of this correlation searches on the Search and Reporting pane of Splunk, I will see the events populate. I have gone through the Splunk documentation on CIM-Compliance topics already and watched some You Tube videos, but still don't get it...Please any extra sources from anyone that can help me understand very well will be very welcome. Thanks and best regards.

ND1 · ‎01-23-2025

Subject: Splunk SOAR Upgrade Issue - 6.2.2.134 to 6.3.1.178 Dear VatsalJagani and the Splunk SOAR community, First thanks for your feedback sir(VatsalJagani) on my previous concerns... I hope this email finds you well in the New Year. I am writing to request your assistance with an issue I am encountering while upgrading Splunk SOAR from version 6.2.2.134 to 6.3.1.178 on an Amazon Linux instance using Putty. I have successfully installed both versions of Splunk SOAR on the instance. However, when attempting to upgrade from 6.2.2.134 to 6.3.1.178 using the script provided in the Splunk documentation, I am encountering the following errors: Failed to detect installed version Failed to initialize deployment I have carefully reviewed and followed the steps outlined in the Splunk documentation, but the issue persists. I would greatly appreciate any guidance or suggestions you or anyone may have to resolve this upgrade issue. Thank you for your time and assistance. Sincerely,

ND1 · ‎12-28-2024

Hello Splunk SOAR family, hope each of you is doing good. Can anyone has some tips when it comes to installing and configuring the new version of Splunk SOAR?

Posts	8
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎12-28-2024

Online Status	Offline
Date Last Visited	yesterday

Building and Using Custom Functions in Splunk SOAR

Splunk CIM-Compliance related questions

Splunk CIM-compliance concerns

Splunk SOAR(On-premises) 6.3.1 configuration

Building and Using Custom Functions in Splunk SOAR

Re: Splunk CIM-compliance concerns

Re: Splunk CIM-compliance concerns

Re: Splunk CIM-compliance concerns

Splunk CIM-Compliance related questions

Splunk CIM-compliance concerns

Re: Splunk SOAR(On-premises) 6.3.1 configuration

Splunk SOAR(On-premises) 6.3.1 configuration

Are you a member of the Splunk Community?