Get a container by its ID.
External Documentation
To learn more, visit the Splunk SOAR documentation.
Parameter | Description |
---|---|
Container ID | The ID of the container. Can be obtained by using the List Containers action. |
{
"tags": [
"<string>"
],
"id": 750,
"artifact_count": 20,
"artifact_update_time": "2022-12-05T18:10:10",
"asset": null,
"close_time": null,
"closing_owner": null,
"closing_rule_run": null,
"container_update_time": "2020-09-21T14:14:19",
"create_time": "2024-12-29T19:36:09",
"data": {},
"description": "<string>",
"due_time": "2020-02-13T00:46:11",
"end_time": null,
"hash": "<string>",
"external_id": null,
"ingest_app": null,
"kill_chain": null,
"label": "<string>",
"name": "<string>",
"open_time": "2024-09-12T23:23:21",
"owner": null,
"role": null,
"owner_name": null,
"sensitivity": "<string>",
"severity": "<string>",
"source_data_identifier": "<string>",
"start_time": "2021-12-07T05:06:15",
"status": "<string>",
"version": 51,
"workflow_name": "<string>",
"custom_fields": {},
"container_type": "<string>",
"in_case": true,
"current_phase": 658,
"tenant": 67,
"parent_container": null,
"node_guid": null
}
Get Container with Splunk Soar and Send Results Via Email
Preview this Workflow on desktop
Was this page helpful?