Splunk SOAR

Splunk SOAR(On-premises) 6.3.1 configuration

ND1
New Member

Hello Splunk SOAR family, hope each of you is doing good. Can anyone has some tips when it comes to installing and configuring the new version of Splunk SOAR?

Tags (2)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@ND1- I think this doc should help.

https://docs.splunk.com/Documentation/SOARonprem/6.3.1/Install/InstallUnprivileged

 

For Tip, keep in mind SOAR only supports limited Operating Systems - https://docs.splunk.com/Documentation/SOARonprem/6.3.1/Install/Requirements

( It took huge amount of time me installing on Ubuntu and then realised its not supported.)

 

I hope this helps!!! Please upvote !!!

0 Karma

ND1
New Member

Subject: Splunk SOAR Upgrade Issue - 6.2.2.134 to 6.3.1.178

Dear VatsalJagani and the Splunk SOAR community,

First thanks for your feedback sir(VatsalJagani) on my previous concerns...

I hope this email finds you well in the New Year.

I am writing to request your assistance with an issue I am encountering while upgrading Splunk SOAR from version 6.2.2.134 to 6.3.1.178 on an Amazon Linux instance using Putty.

I have successfully installed both versions of Splunk SOAR on the instance. However, when attempting to upgrade from 6.2.2.134 to 6.3.1.178 using the script provided in the Splunk documentation, I am encountering the following errors:

  • Failed to detect installed version
  • Failed to initialize deployment

I have carefully reviewed and followed the steps outlined in the Splunk documentation, but the issue persists.

I would greatly appreciate any guidance or suggestions you or anyone may have to resolve this upgrade issue.

Thank you for your time and assistance.

Sincerely,

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust
Its difficult to answer without detailed review of the system. But based on your comment it seems its an Upgrade issue. I would recommend opening a case with Splunk, and they should be able to help you fix the issue.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...