Splunk SOAR

Working with multiple Automation Broker ?

fbeaudouin
New Member

Hello, 

I would like to know if it's possible to setup a "lot" of automation broker in a single instance within the same tenant ? Or is it only 1 by "tenant" ?

My main usecase would be to have access and act upon a lot of "Onprem" client with a few SOAR cloud instance (client are already merge by "group of client", therefore I do not want to re-split with 1 tenant = 1 client) 

PSA : I did not manage to find the details about the possibility to have multiple "automation broker" in both Splunk SOAR and Splunk Automation Broker, I assume it's possible based on the API and the "id" for the broker, I just want to confirm it, thanks ! 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...