Splunk SOAR’s App Editor

[LesediK]

View our Tech Talk: Security Edition, Automation for the Modern SOC: Splunk SOAR’s New App Editor

Splunk SOAR apps are the integration points between Splunk SOAR and other security technologies that allow users to extend functionality and run actions. Given the broad set of technologies that can be orchestrated, apps provide relief in allowing users to develop and add their own custom functionality.

Splunk SOAR’s new App Editor enables users to create, edit, and test apps all from one place, making the app development experience easier and faster than ever. End-to-end app development is contained within the Splunk SOAR UI, saving you time and energy.

Watch the webinar , Automation for the Modern SOC: Splunk SOAR’s New App Editor, to learn how to:

• Easily view and add code, test actions, see log results, and troubleshoot apps
• Gain additional visibility into how an app functions
• Create totally custom actions or modify existing ones to suit your use cases

[LesediK]

Here are additional resources to continue on your journey.

Apps on Splunkbase - https://splunkbase.splunk.com/apps/#/product/soar/jira

.conf21 Sessions - SEC1301C Splunk SOAR: Automation for the Modern SOC

Splunk SOAR Homepage - https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html 

Splunk Community - https://community.splunk.com/t5/Splunk-SOAR-f-k-a-Phantom/bd-p/security-phantom

[LesediK]

Here is a question from the live airing. Enjoy!

Q: Can Splunk SOAR integrate with ServiceNow ticketing? If yes, then what is the best way to go about it?

A: Yes, you can do this through the app on Splunkbase https://splunkbase.splunk.com/app/5932/