Building and Using Custom Functions in Splunk SOAR

[ND1]

Hello family, please does anyone knows or has sources that explains how to use or built custom functions in Splunk SOAR?

[livehybrid]

Hi @ND1 

There is a tutorial at https://help.splunk.com/en/splunk-soar/soar-cloud/develop-apps/build-playbooks/use-the-playbook-edit... which might be useful for you as a starting guide.

There is also a sample function here: https://gist.github.com/gf13579/e7cd4132c7c61c5cabec4ce953f5a455

and a bunch of custom function examples at https://github.com/phantomcyber/playbooks/tree/7.0/custom_functions which might also help!

Good luck 🙂

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[ND1]

I am going through all the sources, and I am getting lot useful information.

Thanks so much!