Doppel

The Doppel-Splunk SOAR integration automates the ingestion of Doppel alerts into Splunk SOAR, creating containers and artifacts for efficient analysis. It supports actions to create, retrieve, and update alerts directly within the platform.

Supported Actions

• test connectivity: test connectivity
• create alert: Create a new alert in Doppel for a specific entity.
• get alert: Fetch details of a specific Doppel alert by its ID or entity.
• get all alerts: Retrieve multiple Doppel alerts based on search criteria and filters.
• update alert: Update an existing Doppel alert's queue state, entity state, comment or tag.
• on poll: on poll