Splunk® Automation Broker

Set Up and Manage the Splunk SOAR Automation Broker

Reinstall or revert the Splunk SOAR Automation Broker

If there is a problem with your Splunk SOAR Automation Broker installation, you can reinstall the Splunk SOAR Automation Broker.

If you need to reinstall or revert the Splunk SOAR Automation Broker to an earlier release, you must set up the connection with Splunk SOAR (Cloud) or Splunk SOAR (On-premises) again.

Perform these steps in combination with the Splunk SOAR administrator, if you are not the Splunk SOAR administrator.

If you reuse an existing directory for persistent data, you do not need to reregister the Splunk SOAR Automation Broker. If the problem that requires you to reinstall is due to stale or bad data in your persisted data, you must create a new directory and reregister.

To reinstall or revert the Splunk SOAR Automation Broker follow these steps.

  1. As a user with docker or podman permissions, stop the Splunk SOAR Automation Broker by locating the running container for the broker, then stopping the container.
    • For Docker:
      docker ps
      docker stop <container_name>
    • For Podman:
      pdoman ps
      podman stop <container_name>
  2. Once the container has been stopped, you can install the Splunk SOAR Automation Broker by following the installation instructions.

    You may be able to skip some steps in the installation instructions.

    • If you already have the container image you need, you may skip steps to obtain a new container image.
    • If you are reusing the data directory, you can skip steps related to creating and assigning permissions to a data directory.
    • If you are reusing the data directory, you can skip steps related to registering your Automation Broker with Splunk SOAR (Cloud) or Splunk SOAR (On-premises).
Last modified on 29 May, 2024
Upgrade or update the Splunk SOAR Automation Broker   Add a Certificate Authority to the Splunk SOAR Automation Broker

This documentation applies to the following versions of Splunk® Automation Broker: current


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters