Splunk SOAR (f.k.a. Phantom)
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

How do I create a phantom playbook that takes data from a splunk alert and post it to a REST api?

sujana96
New Member
‎04-14-2019 10:31 AM

Hi,
I am totally new to Splunk and phantom. Please help me with the below idea.
I want to create a Phantom playbook that takes data from a splunk alert and then posts the data to a REST api.
Is this possible?
If yes, are there any existing playbooks to achieve this? If I should create one from scratch, can someone tell me the steps to start with?

Labels (1)
Labels
Tags (1)
0 Karma
Reply
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...