rinoxRinox
pushpythonscheduledhand-curated

Splunk → Cortex XSOAR (Palo Alto)

Create XSOAR incidents from Splunk saved-search alerts every 5 minutes

Polls Splunk for new alert results from a saved search and creates matching incidents in Cortex XSOAR, with alert metadata as labels.

splunkxsoarsaved-searchfetchmoderate
Use case

Every 5 minutes, pull new results from a Splunk saved search and create matching incidents in Cortex XSOAR, dedupe by Splunk sid+row hash

No code yet. Click below to run the Rinox pipeline. The result is saved to this library entry — every future visitor gets it instantly.

Generate this integrationCustomize firstSign-in + free-tier limit apply

Useful?

Used by 0 teams · Viewed 4 times · Last validated 5/17/2026