Splunk® Phantom (Legacy)

Install and Upgrade Splunk Phantom

Acrobat logo Download manual as PDF


Splunk Phantom 4.10.7 is the final release of Splunk's Security Orchestration, Automation, and Response (SOAR) system to be called Splunk Phantom. All later versions are named Splunk SOAR (On-premises). For more information, see the Splunk SOAR (On-premises) documentation.
Acrobat logo Download topic as PDF

Convert an existing Splunk Phantom instance into a cluster

If you have an existing Splunk Phantom instance that you want to turn into a clustered Splunk Phantom deployment you need to build a new Splunk Phantom cluster, then restore the PostgreSQL database of your existing instance to your new cluster. The checklist lists the stages and references the topics with detailed instructions.

Number Task Description
1 Build a new cluster with external services Build a cluster using one of the following methods:
2 Back up your current Splunk Phantom instance. See Backup a Splunk Phantom database and restore to an external database in Set up an external PostgreSQL server in Install and Upgrade Splunk Phantom.
3 Restore the PostgreSQL database to the PostgreSQL database for the new cluster. Backup a Splunk Phantom database and restore to an external database in Set up an external PostgreSQL server in Install and Upgrade Splunk Phantom.
Last modified on 29 March, 2021
PREVIOUS
Create a Splunk Phantom Cluster in Amazon Web Services 		  NEXT
Run make_server_node.pyc

This documentation applies to the following versions of Splunk® Phantom (Legacy): 4.8, 4.9, 4.10, 4.10.1, 4.10.2, 4.10.3, 4.10.4, 4.10.6, 4.10.7

Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters