Splunk SOAR (f.k.a. Phantom)

How to cache secrets (usernames, passwords) that can be used by all playbooks and custom functions?

ahkow2
Loves-to-Learn

Hi, I want to use the HashiCorp Vault app to get usernames and passwords. But since my HashiCorp Vault service has call limitation (i.e. the service will block an IP that calls the service too frequently), I want to cache the results.

I could not find a way in SOAR to cache secrets. The cached secrets should be referenced by all playbooks and custom functions, without calling HashiCorp Vault again and again.

 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Thanks for the Memories! Splunk University, .conf24, and Community Connections

Thank you to everyone in the Splunk Community who joined us for .conf24 – starting with Splunk University and ...

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...