List the attached evidence of container by the container’s ID.

​
Basic Parameters

ParameterDescription
Filter Container IDThe ID of the container. Can be obtained by using the List Containers action.
OrderThe is the sorting order for the results.
SortField to sort results with.

​
Advanced Parameters

ParameterDescription
Page NumberPage number of the results to fetch.
Page SizeSize of page to return.

​
Example Output

{
	"count": 702,
	"num_pages": 294,
	"data": [
		{
			"id": 21,
			"create_time": "2021-08-14T21:53:58",
			"modified_time": "2023-07-18T03:02:50",
			"container": 553,
			"object_id": 551,
			"content_type": 132
		}
	]
}

​
Workflow Library Example

List Container Evidence with Splunk Soar and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop