Splunk SOAR × Tines

By integrating Tines’ customizable automation with Splunk SOAR’s robust security orchestration, you can streamline and elevate your incident response capabilities.

Book a demo Sign up free

Pre-built templates

With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.

Get Vault Document by Vault ID in Splunk SOAR

Get Related Connect Events in Splunk SOAR

Get Evidence by Container ID in Splunk SOAR

Get Container Attachment by Container ID in Splunk SOAR

Get Comment by Container ID in Splunk SOAR

Get Artifacts by Container ID in Splunk SOAR

Get All Containers in Splunk SOAR

Create Case in Splunk SOAR

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v   -X GET   --location   "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY"   -H 'Content-Type: application/json'

Paste in your Tines story

Full workflow examples

Explore pre-built workflows for Splunk SOAR. Use them for inspiration or as a starting point to build your custom automation solution.

Export Splunk SOAR cases to Tines

Extract and consolidate data from Splunk SOAR, then generate and enrich Tines cases with annotations and attachments. Monitor case statuses to close them as needed, ensuring all related incidents are linked and documented.