Splunk SOAR

Phantom with Splunk Cloud?

fmh
Engager

Hi,
we are using Splunk Cloud service and would like to extend it with Phantom.
Does anybody know whether this is possible?

Thanks!
-felix

Labels (2)
Tags (2)

cblumer_splunk
Splunk Employee
Splunk Employee

An on-prem/AWS/Azure/GCP instance of Phantom can be used with Splunk Cloud, however a Support case will need to be created in order for the API communication port (default 8089) to be opened for the integration to have connectivity.

Once the connectivity is enabled, a good way to test it out would be to install & configure the Splunk App for Phantom with the required IP/Hostname, port, and user parameters defined.

Here's a KB link for that app:
https://my.phantom.us/4.5/docs/app_reference/phantom_splunk#test-connectivity

woodcock
Esteemed Legend

Surely this is coming soon!

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...