Splunk® App for SOAR

Install and Configure Splunk App for SOAR

Acrobat logo Download manual as PDF


This documentation does not apply to the most recent version of Splunk® App for SOAR. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Check prerequisites for

Check that your environment is ready to use Splunk App for SOAR to integrate Splunk SOAR with Splunk Cloud Platform or Enterprise.

Required user privileges and ports

Verify the following user privileges and ports:

  • Splunk SOAR must have TCP ports 443 and 8089 open to and from Splunk Enterprise Security (ES) search heads.
  • In your on-premises deployment, verify that you have the necessary network availability among all devices.

Splunk product compatibility matrix

Use this matrix to determine the compatibility of Splunk App for SOAR with certain versions of Splunk Cloud Platform or Enterprise and Splunk SOAR (Cloud) or (On-premises). You can use all versions that appear in a single row interchangeably. Splunk Enterprise Security is not required for Splunk App for SOAR.

Splunk App for SOAR version Splunk Enterprise version Splunk Cloud Platform version ITSI version Splunk SOAR (On-premises) version Splunk SOAR (Cloud) version
1.0.41 9.1.1, 9.1.2, 9.2.0 9.1.2308 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.1.1 6.2.0
9.1.0.2 9.0.2303, 9.0.2305, 9.1.2308 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.1.1 6.1.1
9.1.0, 9.1.0.1 9.0.2303, 9.0.2305 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.1.0 6.1.0
9.1.0, 9.0.5 9.0.2303, 9.0.2305 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.0.2 6.0.2
9.1.0 9.0.2303, 9.0.2305 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.0.1 6.0.1
9.0.3, 9.0.4, 9.0.5 9.0.2303 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.0.0, 5.5.0 6.0.0, 5.5.0
8.2.9 9.0.2209 ITSI 4.15.0, with
ITSI content pack 1.7.0
6.0.0, 5.5.0 6.0.0, 5.5.0
Last modified on 28 February, 2024
PREVIOUS
Learn about Splunk App for SOAR
  NEXT
Install Splunk App for SOAR on Splunk Enterprise

This documentation applies to the following versions of Splunk® App for SOAR: 1.0.41


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters