Splunk® Phantom App for Splunk

Install and Upgrade the Splunk Phantom App for Splunk

Acrobat logo Download manual as PDF


This documentation does not apply to the most recent version of Splunk® Phantom App for Splunk. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Configure the Splunk Phantom App for Splunk

Before you can use the Splunk Phantom App for Splunk, you must establish a connection between the Splunk platform and Splunk Phantom. Perform the following tasks make the connection.

  1. Enable Splunk platform users to use the Splunk Phantom App for Splunk.
  2. Provide a valid SSL certificate for the connection between Splunk Phantom and Splunk Enterprise.
  3. Connect the Splunk Phantom App for Splunk and the Splunk Platform to a Splunk Phantom server.
  4. (Optional) If you have Splunk Enterprise Security, Run adaptive response actions in Splunk ES to send notable events to Splunk Phantom.
Last modified on 13 January, 2021
PREVIOUS
Install the Splunk Phantom App for Splunk 		  NEXT
Enable Splunk platform users to use the Splunk Phantom App for Splunk

This documentation applies to the following versions of Splunk® Phantom App for Splunk: 2.7.5, 3.0.5, 4.0.10, 4.0.35

Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters