@ankitsync you can either: 1. Use the phantom APIs phantom.build_phantom_rest_url() & phantom.requests() to run RESTS calls in Phantom playbooks. You can use in either of the custom function types. https://docs.splunk.com/Documentation/Phantom/4.10/PlaybookAPI/SessionAPI 2. You can use the HTTP app in playbooks to speak with Phantom REST. This is sometimes better as there is no custom code required but can require a few format blocks to make the url & any payload for POST actions and needs an asset configured for the App. https://my.phantom.us/4.10/docs/app_reference/phantom_http
... View more