Default Version 2.0.3
September 17, 2021
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9
Rating
0
(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#22
in DevOps
This app implements various incident management and investigative actions
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- on poll: Ingest from Preempt
- get user attributes: Gets the attributes of a user
- get user risk: Gets the risk of a user
- watch user: Watch a user
- unwatch user: Stop watching a user
- get incident: Get information about an incident
- update incident: Update the incident state and/or add a comment to the incident
- get user activity: Get user activity from the specified number of hours ago
Categories
DevOps
Created By
Splunk LLC
Source Code
GitHub(Opens new window)Type
connector
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing