Splunk SOAR (f.k.a. Phantom)

Phantom with Splunk Cloud?

fmh
Engager

Hi,
we are using Splunk Cloud service and would like to extend it with Phantom.
Does anybody know whether this is possible?

Thanks!
-felix

Labels (2)
Tags (2)

cblumer_splunk
Splunk Employee
Splunk Employee

An on-prem/AWS/Azure/GCP instance of Phantom can be used with Splunk Cloud, however a Support case will need to be created in order for the API communication port (default 8089) to be opened for the integration to have connectivity.

Once the connectivity is enabled, a good way to test it out would be to install & configure the Splunk App for Phantom with the required IP/Hostname, port, and user parameters defined.

Here's a KB link for that app:
https://my.phantom.us/4.5/docs/app_reference/phantom_splunk#test-connectivity

woodcock
Esteemed Legend

Surely this is coming soon!

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...