What's New in Splunk SOAR

[WhitneySink]

Since the release of Splunk SOAR 6.0, the Splunk SOAR team has been hard at work implementing new features and integrations to help improve the SOAR user experience.

The version 6.0 release represents a culmination of efforts to become part of the vision of a truly unified Splunk security experience and provides a single security operations solution with its integration with Mission Control.

Key Takeaways:

• Learn about the latest features in Splunk SOAR
• Learn how Splunk SOAR integrates with Mission Control
• Learn about changes to the Automation Broker

[WhitneySink]

Q&A

Here are a few questions submitted by attendees:

Which Splunk Cloud version has this "Content" tab added to it?
The content featured in the presentation (except the last slide that previews upcoming features) should all be available in the current versions for both on prem and cloud.

Is the playbook editor inside of mission control or SOAR? I had the understanding that customizing playbooks would stay in SOAR?
The Playbook Editor is still inside Splunk SOAR.

Is Splunk planning to support load balancing for privately hosted automation brokers? My team is looking to maintain high availability to account for the "dog ate my broker" scenario when executing playbooks. Is there any information as to when this might become a feature?

We don't currently have committed plans on redundancy on Automation Brokers. 

Based on your shirt speaking of "Resilience" is there any update on whether automation brokers will have any built-in resilience settings such as load-balancing?
We don't have an update to share regarding this at the moment but please keep an eye out for more info in future communications from the Splunk SOAR team.