How to select the "create server" button for splunk_app_soar configuration?

[TamishaJ]

Have anyone ran across the following issue before? 

I am trying to implement the Splunk SOAR app but we are not able to select the “create server” button. We have referred to the online documentation but we do not see the option to replace each instance of phantom with splunk_app_soar. 

[phanTom · Accepted solution]

@TamishaJ this sounds like a permissions issue. 

Are you on Splunk Cloud? If so then I believe a few people have had issues seeing the correct permissions group on Splunk Cloud and required support involvement. 

If on-prem, make sure the account has the relevant phantom role(s) in Splunk and you should be able to access the Create Server capability. 

Happy SOARing!