Splunk Investigation
Splunk Incident
Details
| ID | Splunk Investigation |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 11 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
Notes
Work Plan
Linked Incidents
Child Incidents
Evidence
Team Members
Indicators
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 22 |
| dbotmodified | Col 0-1, Height: 22 |
| dbotduedate | Col 0-2, Height: 22 |
| dbotcreated | Col 1-2, Height: 22 |
| dbotclosed | Col 1-2, Height: 22 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 22 |
Investigation Data
| Field ID | Position |
|---|---|
| details | Col 0-2, Height: 22 |
Investigation Summary 5 sections
Investigation Details
| Field ID | Position |
|---|---|
| name | Col 0-2, Height: 22 |
| splunkinvestigationname | Col 0-2, Height: 22 |
| splunkinvestigationid | Col 0-2, Height: 22 |
| splunkinvestigationguid | Col 0-2, Height: 22 |
| splunkinvestigationtype | Col 0-2, Height: 22 |
| splunkincidentorigin | Col 0-2, Height: 22 |
| splunkstatus | Col 0-2, Height: 22 |
| splunkurgency | Col 0-2, Height: 22 |
| splunkdisposition | Col 0-2, Height: 22 |
| splunksensitivity | Col 0-2, Height: 22 |
| occurred | Col 0-2, Height: 22 |
| details | Col 0-2, Height: 44 |
Risk & Entities
| Field ID | Position |
|---|---|
| riskscore | Col 0-2, Height: 22 |
| splunkriskobject | Col 0-2, Height: 53 |
| sourceips | Col 0-2, Height: 53 |
| destinationips | Col 0-2, Height: 53 |
| user | Col 0-2, Height: 22 |
Investigation Metadata
| Field ID | Position |
|---|---|
| owner | Col 0-2, Height: 22 |
| splunkeseventtype | Col 0-2, Height: 22 |
| lastupdatetime | Col 0-2, Height: 22 |
Splunk Notes
Add Note
| Field ID | Position |
|---|---|
| — | Col 0-2, Height: 22 |
Findings 2 sections
Finding IDs
| Field ID | Position |
|---|---|
| splunkincidentids | Col 0-2, Height: 53 |
| splunkexcludedfindingids | Col 0-2, Height: 53 |
| splunkimplicitfindingids | Col 0-2, Height: 53 |
| splunkintermediatefindingids | Col 0-2, Height: 53 |
Consolidated Findings
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.