Skip to content

Splunk SOAR connector v1.4.1: Batch lookups and enhanced features

← All updates ·

Added

  • Batch lookups: All Iris Investigate and Iris Enrich queries now support batch lookups of up to 100 comma-separated domain inputs
  • New Iris fields: Added support for additional Iris fields including “first seen”, “server type”, and “website title”
  • Pivot operators: Pivot action adds support for additional operators including “create date within”, “first seen within”, and “first seen since”
  • Pagination: Added pagination on pivot responses, returning up to 5,000 domains sorted by risk score
  • Outbound pivot links: “Lookup Domain” action displays and adds outbound links to pivot in Iris Investigate when a domain has up to 500 connected domains on a data point
  • Proxy support: Added support for proxies

Changed

  • UI improvements: Minor UI improvements for better user experience
  • Python libraries: Updated Python libraries to latest versions

Documentation

Categories: Integrations, Splunk