System requirements for the Splunk Phantom App for Splunk

The Splunk Phantom App for Splunk requires that a user with administrative privileges installs both the Splunk Phantom App for Splunk and Splunk software.

Splunk platform requirements

The Splunk Phantom App for Splunk requires specific Splunk platform combinations.

Product compatibility matrix with Splunk Cloud

Verify that you are using the following product version combinations if you installing the Splunk Phantom App for Splunk on Splunk Cloud:

Splunk Phantom App for Splunk Version	Splunk Cloud Version	Splunk ES Version	Splunk Phantom Version
4.0.35 (CIM version 4.18.0)	8.2.2104	6.5.1, 6.5.x	4.10.3.51283, 4.10.x
	8.1.2103	6.5.x	4.10.3.51283, 4.10.x
	8.1.2101	6.2.x	4.10.1.45070, 4.10.x
	8.1.2101	6.4.1, 6.4.x	4.10.0.40025, 4.10.x
	8.1.2012	6.2.0, 6.2.x	4.10.0.40961, 4.10.x
	8.1.2012	6.4.1, 6.4.x	4.10.0.40025, 4.10.x
	8.1.2011	6.2.0, 6.2.x	4.10.0.40961, 4.10.x
	8.1.2011	6.4.1, 6.4.x	4.10.0.40025, 4.10.x
	8.1.2009	6.2.0, 6.2.x	4.10.0.40961, 4.10.x
	8.0	6.1.1, 6.1.x	4.10.0.40961, 4.10.x
	7.3	5.3.1, 5.3.2	4.10.0.40961, 4.10.x
4.0.10 (CIM version 4.18.0)	8.0.3	6.1.1, 6.1.x, 6.2.0, 6.2.x	4.8.24304, 4.8.x, 4.9.39220, 4.9.x
	7.3.5	5.3.1, 5.3.x	4.8.24304, 4.8.x, 4.9.39220, 4.9.x
	7.2.10.2	5.3.1, 5.3.x	4.8.24304, 4.8.x, 4.9.39220, 4.9.x

Product compatibility matrix with Splunk Enterprise

Verify that you are using the following product version combinations if you installing the Splunk Phantom App for Splunk on Splunk Enterprise:

Splunk Phantom App for Splunk Version	Splunk Enterprise Version	Splunk ES Version	Splunk Phantom Version
4.0.35 (CIM version 4.18.0)	8.2, 8.2.x	6.5.0, 6.5.x	4.10.1.45070, 4.10.x
	8.1, 8.1.x	6.2.0, 6.2.x	4.10.0.40025, 4.10.x
	8.1, 8.1.x	6.4.1, 6.4.x	4.10.0.40025, 4.10.x
	8.0	6.1.1, 6.1.x	4.10.0.40025, 4.10.x
	8.0	6.4.1, 6.4.x	4.10.0.40025, 4.10.x
	7.3	5.3.1, 5.3.x	4.10.0.40025, 4.10.x
4.0.10 (CIM version 4.18.0)	8.0.3	6.1.1, 6.1.x, 6.2.0, 6.2.x	4.8.24304, 4.8.x, 4.9.39220, 4.9.x
	7.3.5	5.3.1, 5.3.x	4.8.24304, 4.8.x, 4.9.39220, 4.9.x
	7.2.10.2	5.3.1, 5.3.x	4.8.24304, 4.8.x, 4.9.39220, 4.9.x
3.0.5 (CIM version 4.8.0)	8.0	6.0.0, 6.0.x	4.6.19142, 4.6.x
	7.3.3	5.3.1, 5.3.x	4.6.19142, 4.6.x

Common Information Model

Download and install the Splunk Common Information Model (CIM) from Splunkbase. If you have Splunk Enterprise Security (ES) installed, you don't need to download this library as it is already included with Splunk ES.