Splunk SOAR

Using external AI tools

pruthviraj_k_m
Explorer

Hi everyone,

We are trying to build a playbook where we want to summarize the event findings or the incident_notes added by the analysts with the help of external AI tools such as Google Gemini or ChatGPT.. We have API key to call google gemini endpoint for prompting, but we want to do it with HTTP POST method and we need to store the API key safely without exposing and need to create an asset for HTTP connector. Is it possible to do that? How can we call out AI endpoint while running the HTTP action block?

Thank You!

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@pruthviraj_k_m If you know the endpoint/base_url and have an API key then you should just create a HTTP asset using this information, then when you use the POST action you may have to provide a header then it should perform the action, then you can review the responses from the call in the container you use to test the playbook. 

When you create the asset for the HTTP app you will need to provide it with Base URL and you can also add the API key which will be hidden and encrypted in the database, as all passwords/api keys put in the asset settings are. 


--- Hope this helps. Please mark as a solution if this solved your issue. Happy SOARing! ---

-- Hope this helps, if so consider leaving some Karma. Even better is if this fixed your issue, that you mark as a solution for others to find. Happy SOARing!! ---
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...