topic Getting output from splunk query as an attachment in Cortex XSOAR Discussions

Getting output from splunk query as an attachment

Himangi — Thu, 18 May 2023 11:39:40 GMT

Hi All,

I am running a splunk search query and I want the query's output in the form of an attachment to be used as input for the next task. How should I do that?
Please assist..

Thanks

Himangi

Re: Getting output from splunk query as an attachment

albmartinez — Thu, 18 May 2023 17:27:12 GMT

Hi Himangi,

Is there a specific format you would like to save as?

If the content is in the form of an array you can use the "ArrayToCSV" automation to convert it to CSV.

Thanks,

Alberto M.