Enable Splunk AR Workflow Automation
Workflow Automation integrates Splunk SOAR playbooks into AR workspaces to guide users through real-world tasks. To use Workflow Automation, create playbooks in Splunk SOAR and then add them to your AR workspaces in the Splunk AR mobile app.
Configure your Splunk SOAR instance to use the Workflow Automation feature. Then, Splunk AR mobile app users can enable Workflow Automation on their devices.
Workflow Automation is available with Splunk AR version 2.1.0 and higher.
Prerequisites
Before using Workflow Automation in Splunk AR, make sure the following tasks are complete:
- Users who want to use Workflow Automation have registered their devices to a Splunk platform instance. See Register your device in Use Splunk Secure Gateway to register to a Splunk instance.
- You've set up your Splunk AR deployment and have AR workspaces. See Set up Splunk AR in the Get started with Splunk AR topic.
- You've installed Splunk SOAR. See the Splunk SOAR documentation to get started.
- You must have the ar_admin role or the edit_phantom_configuration capability to enable Workflow Automation. See Configure Splunk AR roles and permissions to learn more about Splunk AR roles and capabilities.
- You and your Splunk AR users have the right permissions to view and interact with playbooks. See the Splunk SOAR documentation and see Configure Splunk AR roles and permissions for playbook access permissions in Splunk AR.
Enable Workflow Automation
Complete the following steps in Splunk App for AR and the Splunk AR mobile app to use Workflow Automation. If you're an administrator, start with setting up your Splunk SOAR instance. If you're a user, enable Workflow Automation in the Splunk AR mobile app.
Set up your Splunk SOAR instance
In the Splunk App for AR, configure your Splunk SOAR instance to use Workflow Automation. You must be an administrator to complete the following steps:
- Navigate to Settings.
- Enter your Splunk SOAR username and password.
- Click Test Connection.
- Click Save.
Enable Workflow Automation in the Splunk AR mobile app
In the Splunk AR mobile app, users can log in with their Splunk SOAR credentials to enable Workflow Automation:
- Navigate to Settings.
- Tap Splunk Apps.
- Toggle Enable SOAR
- Enter your Splunk SOAR credentials.
- Tap Log in. Workflow Automation is now enabled.
After enabling Workflow Automation, see Add Splunk SOAR playbooks to AR workspaces in Splunk AR to add a playbook to a workspace using the Splunk AR mobile app.
This documentation applies to the following versions of Splunk® App for Edge Hub and Augmented Reality: 1.10.0, 1.2.0, 1.2.1, 1.3.0, 1.4.1, 2.0.0, 2.0.2, 2.1.0, 3.0.0, 3.0.1, 4.0.0, 4.0.1, 4.1.1, 4.1.2, 4.2.1, 4.2.2, 4.3.0, 4.3.1
Feedback submitted, thanks!