Splunk SOAR Feature Video: Contextual Action Launch
Splunk SOAR apps have a parameter for action inputs and outputs called "contains". These are used to enable contextual actions in the Splunk SOAR user interface. A common example is the contains type "ip". This is a powerful feature that the platform provides, as it allows the user to chain the output of one action as input to another.
Related Videos
A Threat-Based Approach to Splunking the Measurable Value of your Security Data Sources
12 Angry Analysts: Tuning Splunk SOAR events to keep your analysts happy (or at least content)
