SplunkAddNote

Use this script to add a note with a tag (the "Note tag to Splunk" defined in the instance configuration) as an entry in Cortex XSOAR, which will then be mirrored as a note to a Splunk finding. This script should be run within an incident.

python · Splunk

Details

ID	`SplunkAddNote`
Language	python
From Version	6.0.0
Docker Image	`demisto/python3:3.12.13.10404775`

README

Use this script to add a note with a tag (the “Note tag to Splunk” defined in the instance configuration) as an entry in Cortex XSOAR, which will then be mirrored as a note to a Splunk finding. This script should be run within an incident.

Script Data

Name	Description
Script Type	python3
Cortex XSOAR Version	6.0.0

Inputs

Argument Name	Description
note	Note to be added to the Splunk finding.
tag	The note tag. Use the note entry tag (defined in your instance configuration) to mirror the note to splunk.

Outputs

There are no outputs for this script.

Source

SplunkAddNote.py SplunkAddNote_test.py SplunkAddNote.yml

Download History Raw

args:
- description: Note to be added to the Splunk finding.
  name: note
  required: true
- auto: PREDEFINED
  defaultValue: FROM XSOAR
  description: The note tag. Use the note entry tag (defined in your instance configuration) to mirror the note to Splunk.
  name: tags
  predefined:
  - FROM XSOAR
  required: false
  isArray: true
comment: Use this script to add a note with a tag (the "Note tag to Splunk" defined in the instance configuration) as an entry in Cortex XSOAR, which will then be mirrored as a note to a Splunk finding. This script should be run within an incident.
commonfields:
  id: SplunkAddNote
  version: -1
name: SplunkAddNote
script: ""
type: python
tags: []
enabled: true
scripttarget: 0
subtype: python3
runonce: false
dockerimage: demisto/python3:3.12.13.10404775
fromversion: 6.0.0
tests:
- No tests (auto formatted)