Splunk Tech Talks
Deep-dives for technical practitioners.

Splunk Phantom: Put the Fun in Custom Functions

melissap
Splunk Employee
Splunk Employee

View the Tech Talk: Security Edition, Splunk Phantom: Put the Fun in Custom Functions 

(view in My Videos)

 

Do you want an easier way to personalize and share playbooks in Splunk Phantom? Our latest revision to custom functions allows shareable custom code across playbooks and the introduction of complex data objects into the playbook execution path. These aren’t just out-of the-box playbooks, but out-of-the-box custom blocks that save you time and effort. This allows for centralized code management and version control of custom functions. These capabilities provide the building blocks for scaling your automation, even to those without coding capabilities. You can create your own custom functions, or use our pre-packaged custom code blocks.

Tune in to learn:

  • How Splunk delivers custom code blocks to you with Phantom.
  • How to centrally manage and reuse your code so you never have to reinvent the wheel again.
  • How you can use custom functions as building blocks to scale out automation within your organization.
  • How to action custom functions with a live demo.

Tech Talk discussions remain open for two weeks following the live Tech Talk event. Have more questions? Check out our Phantom conversations in Splunk Answers community for more!

Contributors
Get Updates on the Splunk Community!

Data Management Digest – September 2026

    Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of ...

Federated Search for CloudWatch Unified Data Store Is Generally Available

As organizations modernize their cloud environments, AWS workloads generate more security, operational, and ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...