SplunkPyV2 - Classifier

Classifies SplunkPy v2 events (Splunk Finding and Splunk Investigation).

Splunk Classification

Details

ID	`SplunkPyV2 - Classifier`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`Finding`	Splunk Finding
`Investigation`	Splunk Investigation

Source

classifier-SplunkPyV2.json

Download History Raw

{
    "description": "Classifies SplunkPy v2 events (Splunk Finding and Splunk Investigation).",
    "feed": false,
    "id": "SplunkPyV2 - Classifier",
    "keyTypeMap": {
        "Finding": "Splunk Finding",
        "Investigation": "Splunk Investigation"
    },
    "name": "SplunkPyV2 - Classifier",
    "transformer": {
        "complex": {
            "filters": [],
            "root": "splunk_es_event_type",
            "transformers": []
        }
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.0.0",
    "marketplaces": [
        "xsoar",
        "marketplacev2",
        "platform"
    ],
    "supportedModules": [
        "xsiam",
        "agentix"
    ]
}