Add Splunk SOAR playbooks to AR workspaces in Splunk AR

Workflow Automation is available with Splunk AR version 2.1.0 and later. Workflow Automation integrates Splunk SOAR playbooks into AR workspaces to guide users through real-world tasks. To use Workflow Automation, create playbooks in Splunk SOAR and then add them to your AR workspaces in the Splunk AR mobile app.

Prerequisites

• Enable Splunk AR Workflow Automation.
• Create a playbook in Splunk SOAR to use in the Splunk AR Workflow Automation feature for a simple use case and how to create a basic playbook for Workflow Automation. Visit the Splunk SOAR documentation to learn how to create playbooks.

Add a playbook to a workspace in the Splunk AR mobile app

Here's how to add a playbook to an AR workspace in the Splunk AR app.

1. In the Splunk AR app, scan an asset tag to open a workspace.
2. Make sure the workspace is selected.
3. Tap the book button.
4. Select a playbook to add to your workspace.
5. Name the playbook.
6. Adjust the playbook like how you would adjust a visualization or note.
7. Tap save.

Splunk AR users can now play the playbook and go through its prompts. See Run a Splunk SOAR playbook in Splunk AR for user instructions on how to run a playbook in Splunk AR.