Splunk Tech Talks
Deep-dives for technical practitioners.

Splunk Phantom: Put the Fun in Custom Functions

melissap
Splunk Employee
Splunk Employee

View the Tech Talk: Security Edition, Splunk Phantom: Put the Fun in Custom Functions 

(view in My Videos)

 

Do you want an easier way to personalize and share playbooks in Splunk Phantom? Our latest revision to custom functions allows shareable custom code across playbooks and the introduction of complex data objects into the playbook execution path. These aren’t just out-of the-box playbooks, but out-of-the-box custom blocks that save you time and effort. This allows for centralized code management and version control of custom functions. These capabilities provide the building blocks for scaling your automation, even to those without coding capabilities. You can create your own custom functions, or use our pre-packaged custom code blocks.

Tune in to learn:

  • How Splunk delivers custom code blocks to you with Phantom.
  • How to centrally manage and reuse your code so you never have to reinvent the wheel again.
  • How you can use custom functions as building blocks to scale out automation within your organization.
  • How to action custom functions with a live demo.

Tech Talk discussions remain open for two weeks following the live Tech Talk event. Have more questions? Check out our Phantom conversations in Splunk Answers community for more!

Contributors
Get Updates on the Splunk Community!

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

55 Days to Go: Secure Your Seat at Splunk University in Denver

Your .conf26 Experience Starts Before Opening Keynote  If Denver is known for its mile-high elevation, Splunk ...

(re)Introducing the Splunk Community Champions + 2026 – 2027 Splunk MVPs ...

This program exists as a channel to empower and recognize Splunk advocates and help supercharge initiatives to ...