Splunk SOAR(On-premises) 6.3.1 configuration

[ND1]

Hello Splunk SOAR family, hope each of you is doing good. Can anyone has some tips when it comes to installing and configuring the new version of Splunk SOAR?

[VatsalJagani]

@ND1- I think this doc should help.

https://docs.splunk.com/Documentation/SOARonprem/6.3.1/Install/InstallUnprivileged

For Tip, keep in mind SOAR only supports limited Operating Systems - https://docs.splunk.com/Documentation/SOARonprem/6.3.1/Install/Requirements

( It took huge amount of time me installing on Ubuntu and then realised its not supported.)

I hope this helps!!! Please upvote !!!

[ND1]

Subject: Splunk SOAR Upgrade Issue - 6.2.2.134 to 6.3.1.178

Dear VatsalJagani and the Splunk SOAR community,

First thanks for your feedback sir(VatsalJagani) on my previous concerns...

I hope this email finds you well in the New Year.

I am writing to request your assistance with an issue I am encountering while upgrading Splunk SOAR from version 6.2.2.134 to 6.3.1.178 on an Amazon Linux instance using Putty.

I have successfully installed both versions of Splunk SOAR on the instance. However, when attempting to upgrade from 6.2.2.134 to 6.3.1.178 using the script provided in the Splunk documentation, I am encountering the following errors:

• Failed to detect installed version
• Failed to initialize deployment

I have carefully reviewed and followed the steps outlined in the Splunk documentation, but the issue persists.

I would greatly appreciate any guidance or suggestions you or anyone may have to resolve this upgrade issue.

Thank you for your time and assistance.

Sincerely,

[VatsalJagani]

Its difficult to answer without detailed review of the system. But based on your comment it seems its an Upgrade issue. I would recommend opening a case with Splunk, and they should be able to help you fix the issue.