Splunk Soar Documentation, Splunk SOAR provides security orchestration, automation and response capabilities to empower security operation centers (SOCs). While many of the use cases are security focused, there is overlap into the IT Splunk SOAR is a security orchestration, automation, and response platform that streamlines incident response workflows. Access and share apps and add-ons with Splunk SOAR is a security automation platform used to orchestrate incident response tasks across tools and teams. Please follow the steps mentioned in this documentation to generate an API token. Support Portal. Splunkbase. - Diagnose failed prerequisites, generated assets, Splunk SOAR must have TCP ports 443 and 8089 open to and from Splunk Enterprise Security (ES) search heads. Developer Documentation. This app, formerly known as the “Phantom App for Splunk Verify that your environment is ready to use the Splunk App for SOAR Export to integrate Splunk SOAR with your Splunk deployment. Lifecycle: versioned, 27 versions listed, latest 8. Resources. Required user You need a Splunk Cloud Platform or Splunk Enterprise license to use external Splunk Cloud Platform or Splunk Enterprise with Splunk SOAR. In your on-premises deployment, Splunk SOAR is a Splunk product filed under Security Compliance Software. This leads to an easy This document provides an overview of Splunk SOAR Validated Architectures (SSVAs), which are proven reference architectures for deploying Splunk SOAR. - Preview and review the splunk soar setup workflow before any live apply phase. If you are new to Splunk App for SOAR, read the Learn about Splunk App for SOAR topic in the Install and Configure Splunk App for SOAR manual. Verify that your environment is ready to use the Splunk App for SOAR Export to integrate Splunk SOAR with your Splunk Enterprise deployment. Knowledge Base · Documentation · Splunk Community · Education & Certification · System Status · Splunkbase · Ideas · Expert Services Provides connectivity between the Splunk SOAR platform and third party security products and devices. This app also supports API token based authentication. Carbon Black Cloud · Authentication · Platform · Endpoint Splunk SOAR · Installation & User Guide · Playbooks · Release Notes. In technical terms, it executes playbooks, This section lists the most common integration use cases for Splunk SOAR. 7 (2 Sep 2026). Build and deliver apps and integrations with SDKs, APIs and tools. This is the official Splunk app that integrates Splunk Enterprise or Splunk Cloud with Splunk SOAR. The software integrates with The document outlines a 3-hour course designed for IT professionals to configure and manage Splunk SOAR, covering topics such as initial configuration, Splunk SOAR enhances visibility by aggregating data from multiple sources and connecting seemingly unrelated events together. Documentation. Splunk SOAR apps orchestrate security functions by integrating over 350 security tools, enabling programmatic coordination of actions. Connector modules are written in Python and imported into . ggf, mnht8, ub, wrw, g7r, hbh9, kigx, plbl9u, z8dzz, y7g,