Migrate from Splunk Phantom to Splunk SOAR
Splunk SOAR is a cloud-based Security Orchestration, Automation, and Response (SOAR) system that is delivered as a SaaS (software-as-a-service) solution hosted and managed by Splunk.
Splunk SOAR delivers the benefits of Splunk Phantom as a cloud-based service. Splunk Phantom users who have purchased Splunk SOAR have the option to migrate their existing Splunk Phantom administration settings, applications, playbooks, and custom functions for use in Splunk SOAR.
Although Splunk Phantom and Splunk SOAR share many similarities, there are a few restrictions within Splunk SOAR to consider before deciding whether or not to perform the cloud migration. See Restrictions within Splunk SOAR in the Migrate from Splunk Phantom to Splunk SOAR manual.
To see the steps required to perform the migration, see the Migrate from Splunk Phantom to Splunk SOAR in the Migrate from Splunk Phantom to Splunk SOAR manual.
Migrate a Splunk Phantom install from REHL 6 or CentOS 6 to RHEL 7 or CentOS 7 | Splunk Phantom default credentials, script options, and sample configuration files |
This documentation applies to the following versions of Splunk® Phantom (Legacy): 4.10.3, 4.10.4, 4.10.6, 4.10.7
Feedback submitted, thanks!