Get a container by its ID.
External DocumentationTo learn more, visit the Splunk SOAR documentation.

Parameters

ParameterDescription
Container IDThe ID of the container. Can be obtained by using the List Containers action.

Example Output

{
	"tags": [
		"<string>"
	],
	"id": 750,
	"artifact_count": 20,
	"artifact_update_time": "2022-12-05T18:10:10",
	"asset": null,
	"close_time": null,
	"closing_owner": null,
	"closing_rule_run": null,
	"container_update_time": "2020-09-21T14:14:19",
	"create_time": "2024-12-29T19:36:09",
	"data": {},
	"description": "<string>",
	"due_time": "2020-02-13T00:46:11",
	"end_time": null,
	"hash": "<string>",
	"external_id": null,
	"ingest_app": null,
	"kill_chain": null,
	"label": "<string>",
	"name": "<string>",
	"open_time": "2024-09-12T23:23:21",
	"owner": null,
	"role": null,
	"owner_name": null,
	"sensitivity": "<string>",
	"severity": "<string>",
	"source_data_identifier": "<string>",
	"start_time": "2021-12-07T05:06:15",
	"status": "<string>",
	"version": 51,
	"workflow_name": "<string>",
	"custom_fields": {},
	"container_type": "<string>",
	"in_case": true,
	"current_phase": 658,
	"tenant": 67,
	"parent_container": null,
	"node_guid": null
}

Workflow Library Example

Get Container with Splunk Soar and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop