Run Splunk Phantom Playbooks in Splunk AR (beta)
Workflow automation is a beta feature available in Splunk AR version 2.1.0. Workflow automation integrates Phantom playbooks into AR workspaces to guide you through real-world tasks. Run playbooks to receive guidance on how to complete a task.
Prerequisites
- Register your device to a Splunk instance and a Phantom instance.
- Enable the workflow automation feature.
- Be able to View an AR workspace.
- Your admin or a user with the playbook_manage capability has added a Splunk Phantom playbook to the AR workspace you're viewing.
To register your device to a Splunk and Phantom instance and enable workflow automation, see Register your device and enable workflow automation.
Run a Splunk Phantom playbook
To use the workflow automation feature, run a playbook in an AR workspace.
- Scan an asset tag.
- Tap a playbook.
- Tap the play button.
- Tap the prompt that appears.
- Respond accordingly.
Add Splunk SOAR playbooks to AR workspaces in Splunk AR | Troubleshoot Splunk AR |
This documentation applies to the following versions of Splunk® AR for iOS: 2.1.0, 2.2.0, 2.3.0, 2.4.1, 2.5.0
Feedback submitted, thanks!