Manuals
Phantom Add-On for Splunk®

The Phantom Add-On for Splunk is a forwarding app that translates and forwards information from the Splunk platform to a Splunk Phantom instance.

Release Notes
What's new in the latest release of the Phantom App for Splunk.

Install and Upgrade the Phantom Add-On for Splunk
How to install and upgrade the Phantom App for Splunk.

Use the Phantom Add-On for Splunk to Forward Events
How to use event forwarding in the Phantom App for Splunk.