Splunk SOAR (f.k.a. Phantom)

How do I create a phantom playbook that takes data from a splunk alert and post it to a REST api?

New Member

I am totally new to Splunk and phantom. Please help me with the below idea.
I want to create a Phantom playbook that takes data from a splunk alert and then posts the data to a REST api.
Is this possible?
If yes, are there any existing playbooks to achieve this? If I should create one from scratch, can someone tell me the steps to start with?

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...