Splunk SOAR

Using external AI tools

pruthviraj_k_m
Explorer

Hi everyone,

We are trying to build a playbook where we want to summarize the event findings or the incident_notes added by the analysts with the help of external AI tools such as Google Gemini or ChatGPT.. We have API key to call google gemini endpoint for prompting, but we want to do it with HTTP POST method and we need to store the API key safely without exposing and need to create an asset for HTTP connector. Is it possible to do that? How can we call out AI endpoint while running the HTTP action block?

Thank You!

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@pruthviraj_k_m If you know the endpoint/base_url and have an API key then you should just create a HTTP asset using this information, then when you use the POST action you may have to provide a header then it should perform the action, then you can review the responses from the call in the container you use to test the playbook. 

When you create the asset for the HTTP app you will need to provide it with Base URL and you can also add the API key which will be hidden and encrypted in the database, as all passwords/api keys put in the asset settings are. 


--- Hope this helps. Please mark as a solution if this solved your issue. Happy SOARing! ---

-- Hope this helps, if so consider leaving some Karma. Even better is if this fixed your issue, that you mark as a solution for others to find. Happy SOARing!! ---
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

55 Days to Go: Secure Your Seat at Splunk University in Denver

Your .conf26 Experience Starts Before Opening Keynote  If Denver is known for its mile-high elevation, Splunk ...

(re)Introducing the Splunk Community Champions + 2026 – 2027 Splunk MVPs ...

This program exists as a channel to empower and recognize Splunk advocates and help supercharge initiatives to ...