Splunk Tech Talks
Deep-dives for technical practitioners.

Splunk Phantom: Put the Fun in Custom Functions

melissap
Splunk Employee
Splunk Employee

View the Tech Talk: Security Edition, Splunk Phantom: Put the Fun in Custom Functions 

(view in My Videos)

 

Do you want an easier way to personalize and share playbooks in Splunk Phantom? Our latest revision to custom functions allows shareable custom code across playbooks and the introduction of complex data objects into the playbook execution path. These aren’t just out-of the-box playbooks, but out-of-the-box custom blocks that save you time and effort. This allows for centralized code management and version control of custom functions. These capabilities provide the building blocks for scaling your automation, even to those without coding capabilities. You can create your own custom functions, or use our pre-packaged custom code blocks.

Tune in to learn:

  • How Splunk delivers custom code blocks to you with Phantom.
  • How to centrally manage and reuse your code so you never have to reinvent the wheel again.
  • How you can use custom functions as building blocks to scale out automation within your organization.
  • How to action custom functions with a live demo.

Tech Talk discussions remain open for two weeks following the live Tech Talk event. Have more questions? Check out our Phantom conversations in Splunk Answers community for more!

Contributors

Write for the Community Blog

Have a tip, real-world lesson, or project to share? We’ll partner with you to refine your draft, sharpen your headings, and spotlight your work.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...