Splunk SOAR

Can the Automation Broker be installed on a virtual machine?

shanto12
New Member

I was wondering if anyone has experience installing the AB on a virtual machine? Is this possible? What are the challenges faced if there are any? There is nothing in the doc about this. Thanks in advance.

Labels (1)
0 Karma

CS_
Path Finder

Yes you can. We have several Virtual servers running on ESXi, and we have broker docker containers running on them. The only issues we're experiencing is occasional errors in SOAR that say "Failed to communicate with Automation Broker" - which I think is a result of our corporate network more than anything else.

But as long as your VM can communicate with SOAR, I can't see any reason why a broker wouldn't work on the VM.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...