Splunk Investigation

Splunk · #A5D8F8

Details

ID	`Splunk Investigation`
Version	-1
From Version	6.0.0
Playbook	—
Auto-run	No
Disabled	No
Read Only	No
Default	No

Source

incidenttype-Splunk_Investigation.json

Download History Raw

{
    "autorun": false,
    "color": "#A5D8F8",
    "days": 0,
    "daysR": 0,
    "default": false,
    "detached": false,
    "disabled": false,
    "extractSettings": {
        "fieldCliNameToExtractSettings": {},
        "mode": "All"
    },
    "hours": 0,
    "hoursR": 0,
    "id": "Splunk Investigation",
    "playbookId": "",
    "layout": "Splunk Investigation",
    "locked": false,
    "name": "Splunk Investigation",
    "onChangeRepAlg": 0,
    "readonly": false,
    "reputationCalc": 2,
    "system": false,
    "version": -1,
    "weeks": 0,
    "weeksR": 0,
    "marketplaces": [
        "xsoar",
        "marketplacev2",
        "platform"
    ],
    "fromVersion": "6.0.0",
    "supportedModules": [
        "xsiam",
        "agentix"
    ]
}