connectors
connectors copied to clipboard
[Splunk-connector] batch_save
Description
If Splunk-connector try to modify a deleted (or not present) item in Splunk. I have a 404 error (Only I slunk logs ref )
If an element is not present, it should be created
Environment
- debian
- OpenCTI version: 5.5.1
Reproducible Steps
- Use this connector with a new Kvstore
- On Opencti updates an item that is not present in Splunk
Expected Output
The element is created in Splunk
Actual Output
Nothing
Additional information
Maybe you can use batch_save