Splunk® Phantom (Legacy)

Administer Splunk Phantom

Splunk Phantom 4.10.7 is the final release of Splunk's Security Orchestration, Automation, and Response (SOAR) system to be called Splunk Phantom. All later versions are named Splunk SOAR (On-premises). For more information, see the Splunk SOAR (On-premises) documentation.

Configure your company settings in Splunk Phantom

Set the Company Name, IT Contact email address, System Time Zone, and the appliance Base URL for this Splunk Phantom instance. The settings are described in the following table:

Setting Description
Company Name The name of the company used in emails sent by Splunk Phantom.
IT Contact The email address of the OS system administrator for Splunk Phantom. System-level alerts are sent to this email address.
Instance Name A unique name used to identify a certain instance of Splunk Phantom. Instance names are randomly generated and can be changed if desired, but changing the instance name is not required. Use instance names to identify your chosen instance for the mobile app.
System Time Zone The time zone for the host system of the virtual appliance that the Splunk Phantom instance runs on.
Base URL for the Splunk Phantom Appliance The URL used to access Splunk Phantom. Set this URL to https:// followed by the IP address or DNS name of the Splunk Phantom instance. Don't specify a trailing slash at the end of the base URL.
Last modified on 19 February, 2020
security information   Configure the ROI Settings dashboard

This documentation applies to the following versions of Splunk® Phantom (Legacy): 4.8, 4.9, 4.10, 4.10.1, 4.10.2, 4.10.3, 4.10.4, 4.10.6, 4.10.7

Was this topic useful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters