Splunk SOAR connector v1.4.1: Batch lookups and enhanced features
Added
- Batch lookups: All Iris Investigate and Iris Enrich queries now support batch lookups of up to 100 comma-separated domain inputs
- New Iris fields: Added support for additional Iris fields including “first seen”, “server type”, and “website title”
- Pivot operators: Pivot action adds support for additional operators including “create date within”, “first seen within”, and “first seen since”
- Pagination: Added pagination on pivot responses, returning up to 5,000 domains sorted by risk score
- Outbound pivot links: “Lookup Domain” action displays and adds outbound links to pivot in Iris Investigate when a domain has up to 500 connected domains on a data point
- Proxy support: Added support for proxies
Changed
- UI improvements: Minor UI improvements for better user experience
- Python libraries: Updated Python libraries to latest versions
Documentation
Categories: Integrations, Splunk