Manage webhooks in Splunk SOAR (Cloud)

Apps can define webhooks to extend Splunk SOAR (Cloud) with new HTTP endpoints. These webhooks can be used by apps to define callback URLs for other services to use.

An administrator can manage the webhooks service from the Home menu, Administration, Administration Settings, Webhooks page.

This page displays a message and a button based on the on or off state of the webhooks service and, if the service is on, a list of active webhooks.

Toggle the webhooks service on or off

An administrator can toggle on or off the webhooks handlers service. Toggling the service off prevents webhooks from being used by any asset.

To toggle the webhooks service on or off, navigate from the Home menu, select Administration, then Administration Settings, then Webhooks:

1. If the webhooks service is toggled on, a message will display The webhook service is enabled. The button to the right of this message will be red and labeled Disable.
   1. Click the Disable button, then click the Confirm button. The webhooks service is now off.
2. If the webhooks service is toggled off, a message will display The webhook service is disabled. The button to the right of this message will be blue and labeled Enable.
   1. Click the Enable button, then click the Confirm button. The webhooks service is now on.

Manage an active webhook

If the webhooks service is on, an administrator can toggle on or off or configure an existing webhook handler.

To manage a webhooks handler navigate from the Home menu, select Administration, then Administration Settings, then Webhooks. Webhooks handlers are listed in a table in the lower portion of the user interface.

1. Find the name of the webhooks handler you want to manage in the list of webhooks handlers.
   1. Toggle the switch in the Enabled column to the on position to turn the webhook handler on, or to the off position to turn the webhook handler off.
   2. To manage other settings, click the button labeled Configure. You will be taken to the relevant app's asset configuration, on the webhooks tab. See Configure webhooks settings for a Splunk SOAR (Cloud) asset.

Configure a webhooks handler for an asset

If an app has support for a webhook handler in its code, then the asset settings page for the app will have a tab for webhook settings.

To configure a webhooks handler for an asset, see Configure webhooks settings for a Splunk SOAR (Cloud) asset.