Splunk SOAR

How to select the "create server" button for splunk_app_soar configuration?

TamishaJ
Engager

Have anyone ran across the following issue before? 

I am trying to implement the Splunk SOAR app but we are not able to select the “create server” button. We have referred to the online documentation but we do not see the option to replace each instance of phantom with splunk_app_soar. 

0 Karma
1 Solution

phanTom
SplunkTrust
SplunkTrust

@TamishaJ this sounds like a permissions issue. 

Are you on Splunk Cloud? If so then I believe a few people have had issues seeing the correct permissions group on Splunk Cloud and required support involvement. 

If on-prem, make sure the account has the relevant phantom role(s) in Splunk and you should be able to access the Create Server capability. 

Happy SOARing!

View solution in original post

0 Karma

phanTom
SplunkTrust
SplunkTrust

@TamishaJ this sounds like a permissions issue. 

Are you on Splunk Cloud? If so then I believe a few people have had issues seeing the correct permissions group on Splunk Cloud and required support involvement. 

If on-prem, make sure the account has the relevant phantom role(s) in Splunk and you should be able to access the Create Server capability. 

Happy SOARing!

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...