Splunk® AR for iOS

Use Splunk AR

Acrobat logo Download manual as PDF

This documentation does not apply to the most recent version of AR. Click here for the latest version.
Acrobat logo Download topic as PDF

Run Splunk Phantom Playbooks in Splunk AR (beta)

Workflow automation is a beta feature available in Splunk AR version 2.1.0. Workflow automation integrates Phantom playbooks into AR workspaces to guide you through real-world tasks. Run playbooks to receive guidance on how to complete a task.


  • Register your device to a Splunk instance and a Phantom instance.
  • Enable the workflow automation feature.
  • Be able to View an AR workspace.
  • Your admin or a user with the playbook_manage capability has added a Splunk Phantom playbook to the AR workspace you're viewing.

To register your device to a Splunk and Phantom instance and enable workflow automation, see Register your device and enable workflow automation.

Run a Splunk Phantom playbook

To use the workflow automation feature, run a playbook in an AR workspace.

  1. Scan an asset tag.
  2. Tap a playbook.
  3. Tap the play button.
  4. Tap the prompt that appears.
  5. Respond accordingly.
Last modified on 08 October, 2020
Add Phantom playbooks to AR workspaces in Splunk AR
Troubleshoot Splunk AR

This documentation applies to the following versions of Splunk® AR for iOS: 2.1.0, 2.2.0, 2.3.0, 2.4.1, 2.5.0

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters