Splunk® Automation Broker

Set Up and Manage the Splunk SOAR Automation Broker

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Configure Connectors to use the Splunk SOAR Automation Broker

You must configure connectors before the Splunk SOAR Automation Broker can connect to on-premises assets to perform actions.

Set up a Connector to use the Splunk SOAR Automation Broker

You must configure a connector to use a Splunk SOAR Automation Broker.

  1. In Splunk SOAR (Cloud) or Splunk SOAR (On-premises), click Home then Apps.
  2. Locate the connector that you want to configure.
    1. To edit a configured asset, click the arrow symbol ( ▶ ) labeled configured assets, then click the entry for the asset you want to edit.
    2. If you want to create a new asset for the connector, click the Configure New Asset button.
  3. Click the Asset Info tab.
  4. In the Automation Broker drop-down menu, select the name of the Splunk SOAR Automation Broker you want the connector to use.
  5. Click Save.

Set up environment variables to apply to your connector configurations

You can set up variables for your connector configurations in Splunk SOAR (Cloud) or Splunk SOAR (On-premises) deployment. These variables are applied on an individual connector's settings.

Set environment variables for a specific connector configuration

You can set up environment variables for a specific connector configuration. For example, add connector-specific proxy settings, or to create multiple connector configurations for multiple sites and Splunk SOAR Automation Broker instances.

  1. In Splunk SOAR (Cloud) or Splunk SOAR (On-premises), click Home then Apps.
  2. Locate the connector that you want to set up environment variables for.
  3. Follow the steps to create or modify a connector configuration. See Set up a Connector to use the Splunk SOAR Automation Broker.
  4. While editing the connector configuration, click the Asset Settings tab.
  5. Click Advanced.
  6. Click + Variable and add a new environment variable. If the variable is a password, certificate, or other secret, select the Secret checkbox.
  7. Click Save.

For example, if you have four different sites with different firewall configurations, install a Splunk SOAR Automation Broker at each site and set up four different connector configurations for the firewall connector, each one specifying different environment variables specific to the site settings.

Last modified on 22 February, 2024
PREVIOUS
Interact with the Splunk SOAR Automation Broker
  NEXT
Customize the Splunk SOAR Automation Broker

This documentation applies to the following versions of Splunk® Automation Broker: current


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters