Run Splunk SOAR Playbooks in Splunk AR
Workflow automation is a beta feature available in Splunk AR version 2.1.0. Workflow automation integrates Splunk SOAR playbooks into AR workspaces to guide you through real-world tasks. Run playbooks to receive guidance on how to complete a task.
Prerequisites
- Register your device to a Splunk Platform instance that has Splunk Secure Gateway and the Splunk App for AR installed. See Register your mobile device to a Splunk instance.
- Register your device to the Splunk SOAR instance that you want to run playbooks from.
- Have the right Splunk AR user permissions Configure Splunk AR roles and permissions.
- An admin or a user with the playbook_manage capability has added a Splunk SOAR playbook to the AR workspace you're viewing.
- Enable the Workflow Automation feature.
Run a Splunk SOAR playbook
To use the workflow automation feature, run a playbook in an AR workspace.
- Scan an asset tag.
- Tap a playbook.
- Tap the play button.
- Tap the prompt that appears.
- Respond accordingly.
Add Splunk SOAR playbooks to AR workspaces in Splunk AR | Troubleshoot Splunk AR |
This documentation applies to the following versions of Splunk® AR for iOS: 3.0.0, 3.0.1, 3.0.2, 3.1.0, 3.1.1, 3.2.0, 3.2.1, 3.3.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1, 4.0.0, 5.0.1, 5.0.2, 5.0.3
Feedback submitted, thanks!