Splunk® Phantom App for Splunk

Install and Upgrade the Splunk Phantom App for Splunk

Acrobat logo Download manual as PDF


This documentation does not apply to the most recent version of Splunk® Phantom App for Splunk. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Upgrade the Splunk Phantom App for Splunk

Upgrade the Splunk Phantom App for Splunk to ensure that you can use the full functionality of the add-on.

Considerations before upgrading the Splunk Phantom App for Splunk

Read the following important information before upgrading the Splunk Phantom App For Splunk:

  • Downgrading from release 2.6.22 or higher of the Splunk Phantom App for Splunk to release 2.5.23 or lower is not supported.
  • When upgrading to this release of the Splunk Phantom App for Splunk from release 2.5.23 or earlier, it is recommended to upgrade to each intermediate version so that Splunk Phantom server configurations are properly converted and updated to newer formats. For example, to upgrade from release 2.5.23 to release 3.0.5, first upgrade to release 2.6.22 or 2.7.5, and then upgrade to release 3.0.5. Releases 2.6.22 and 2.7.5 both have the same server configuration, so you only need to upgrade to one of them.
  • Before upgrading the Splunk Phantom App for Splunk, backup your files from the command line by copying the complete directory $SPLUNK_HOME/etc/apps/phantom to another location that's not under $SPLUNK_HOME/etc/apps.

Steps to upgrade the Splunk Phantom App for Splunk

To upgrade the Splunk Phantom App for Splunk, follow these steps:

  1. Download the latest version of the Splunk Phantom App for Splunk from Splunkbase.
  2. Go to your Splunk platform instance.
  3. In the apps panel, click the gear icon.
  4. Click Install app from file.
  5. Upload the Splunk Phantom App for Splunk file.
  6. Check the box to upgrade the add-on. Checking this box overwrites the add-on if it already exists.

Your Splunk platform instance restarts to complete the upgrade.

Last modified on 13 January, 2021
PREVIOUS
Backup and restore configuration files for Splunk Phantom App for Splunk
  NEXT
Troubleshoot the Splunk Phantom App for Splunk

This documentation applies to the following versions of Splunk® Phantom App for Splunk: 2.7.5, 3.0.5, 4.0.10, 4.0.35


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters