{
"description": "Maps Splunk ES outgoing fields.",
"feed": false,
"id": "Splunk - Notable Generic Outgoing Mapper",
"mapping": {
"Splunk Notable Generic": {
"dontMapEventToLabels": false,
"internalMapping": {
"urgency": {
"complex": null,
"simple": "notableurgency"
},
"reviewer": {
"simple": "",
"complex": {
"filters": [],
"root": "splunknotablereviewer",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
}
}
},
"dbot_classification_incident_type_all": {
"dontMapEventToLabels": false,
"internalMapping": {
"status": {
"complex": {
"accessor": "",
"filters": [],
"root": "notablestatus",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "New,In Progress,Pending,Resolved,Closed"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1,2,3,4,5"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
},
"urgency": {
"complex": null,
"simple": "notableurgency"
}
}
}
},
"name": "Splunk - Notable Generic Outgoing Mapper",
"type": "mapping-outgoing",
"version": -1,
"marketplaces": [
"xsoar",
"marketplacev2",
"platform"
],
"fromVersion": "6.2.0",
"supportedModules": [
"xsiam",
"agentix"
]
}