SplunkConvertConsolidatedFindingsToMD

Renders the Splunk Investigation `consolidated_findings` JSON payload as a Markdown summary (key/value table for scalar fields plus a transposed table for parallel array columns such as `search_name`, `_time`, `dest`, `risk_score`, `severity`, and `src`). Designed for use as a dynamic-section in the Splunk Investigation layout.

python · Splunk

Details

ID	`SplunkConvertConsolidatedFindingsToMD`
Language	python
From Version	6.2.0
Docker Image	`demisto/python3:3.12.13.10404775`
Tags	dynamic-section

README

Renders the Splunk Investigation consolidated_findings JSON payload as a Markdown summary (key/value table for scalar fields plus a transposed table for parallel array columns such as search_name, _time, dest, risk_score, severity, and src). Designed for use as a dynamic-section in the Splunk Investigation layout.

Script Data

Name	Description
Script Type	python3
Tags	dynamic-section
Cortex XSOAR Version	6.2.0

Inputs

There are no input arguments for this script.

Outputs

There are no outputs for this script.

Source

SplunkConvertConsolidatedFindingsToMD.py SplunkConvertConsolidatedFindingsToMD_test.py SplunkConvertConsolidatedFindingsToMD.yml

Download History Raw

commonfields:
  id: SplunkConvertConsolidatedFindingsToMD
  version: -1
comment: Renders the Splunk Investigation `consolidated_findings` JSON payload as a Markdown summary (key/value table for scalar fields plus a transposed table for parallel array columns such as `search_name`, `_time`, `dest`, `risk_score`, `severity`, and `src`). Designed for use as a dynamic-section in the Splunk Investigation layout.
name: SplunkConvertConsolidatedFindingsToMD
outputs: []
script: '-'
system: false
tags:
- dynamic-section
timeout: '0'
type: python
subtype: python3
runas: DBotWeakRole
dockerimage: demisto/python3:3.12.13.10404775
fromversion: 6.2.0
tests:
- No tests (auto formatted)