Welcome to the Splunk Phantom App for Splunk version 4.0.10!
This release of the Splunk Phantom App for Splunk has the following new features and enhancements.
Feature | Description |
---|---|
Python 2 and 3 compatibility | This release of the Splunk Phantom App for Splunk is updated to provide full support for Python 3. See Python 3 migration with the Splunk platform in the Python 3 Migration manual. |
Multivalue option for adaptive response artifacts | When adaptive response notables are received by Splunk Phantom as artifacts, a new configuration option allows you to choose one of the following options when the notable contains multivalue fields:
|
Use adaptive response relay to forward events to Splunk Phantom | Set up multiple Splunk platform instances to use adaptive response relay and maintain control over when adaptive response notables are sent to Splunk Phantom.
|
Fixed Issues for the Splunk Phantom App for Splunk |
This documentation applies to the following versions of Splunk® Phantom App for Splunk: 4.0.10
Feedback submitted, thanks!