Understanding Phantom Aggregation Rules Splunk Apr 27, 2020 Splunk Share: Share on Facebook Share on Twitter Share on LinkedIn Share through email This video shows how Aggregation rules work and may provide some ideas on their usage in your own Phantom deployment.