Splunk Dev

How to securely store credentials in Splunk SOAR/Phantom and use it to perform API call's using custom functions?

kellin0jk
New Member

Hi,

I wanted to see if there is anyway we can store credentials in Phantom which is not visible to the users within Phantom, but we can somehow fetch those credentials in Custom function within our playbook to do some API calls which need those credentials. .....?

Note:- built in Phantom app's such as HTTP does not meet our requirements, therefore we're using python request module to make API calls within custom function to achieve this

Thanks!

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...