Splunk Dev

How to securely store credentials in Splunk SOAR/Phantom and use it to perform API call's using custom functions?

kellin0jk
New Member

Hi,

I wanted to see if there is anyway we can store credentials in Phantom which is not visible to the users within Phantom, but we can somehow fetch those credentials in Custom function within our playbook to do some API calls which need those credentials. .....?

Note:- built in Phantom app's such as HTTP does not meet our requirements, therefore we're using python request module to make API calls within custom function to achieve this

Thanks!

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...