https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/splunk-add-on-xsoar-mapping/m-p/583069#M3224 <P>Hello!</P> <P>&nbsp;</P> <P>For 6.X versions, You can map these alerts by going to object Setup-&gt;Incidents and clicking on three dots on the top right and selecting API endpoint mapping and then selecting the splunk addon option there.&nbsp;</P> <P>&nbsp;</P> <P>If you are on the newer versions, the same option is found on the classifiction and mapping page.&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2024-04-09 at 8.46.22 AM.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58902i9CC8EAFF6AA60499/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Screenshot 2024-04-09 at 8.46.22 AM.png" alt="Screenshot 2024-04-09 at 8.46.22 AM.png" /></span></P> Tue, 09 Apr 2024 15:46:44 GMT BharathwajTiruputkuzhi 2024-04-09T15:46:44Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/splunk-add-on-xsoar-mapping/m-p/583030#M3223 <P><SPAN>We fetch incident with Splunk Add-on. What should I do to enrich and map it? How can I run the mapper here? or do I need to proceed with setincident commands?</SPAN></P> <P>&nbsp;</P> <P><SPAN>#SplunkAddon</SPAN></P> <P><SPAN><LI-PRODUCT title="Cortex XSOAR" id="Cortex_XSOAR"></LI-PRODUCT>&nbsp;</SPAN></P> Tue, 09 Apr 2024 10:04:49 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/splunk-add-on-xsoar-mapping/m-p/583030#M3223 YilmazDincer 2024-04-09T10:04:49Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/splunk-add-on-xsoar-mapping/m-p/583069#M3224 <P>Hello!</P> <P>&nbsp;</P> <P>For 6.X versions, You can map these alerts by going to object Setup-&gt;Incidents and clicking on three dots on the top right and selecting API endpoint mapping and then selecting the splunk addon option there.&nbsp;</P> <P>&nbsp;</P> <P>If you are on the newer versions, the same option is found on the classifiction and mapping page.&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2024-04-09 at 8.46.22 AM.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58902i9CC8EAFF6AA60499/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Screenshot 2024-04-09 at 8.46.22 AM.png" alt="Screenshot 2024-04-09 at 8.46.22 AM.png" /></span></P> Tue, 09 Apr 2024 15:46:44 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/splunk-add-on-xsoar-mapping/m-p/583069#M3224 BharathwajTiruputkuzhi 2024-04-09T15:46:44Z