Manuals
Splunk® Phantom Remote Search

Splunk Phantom Remote Search defines indexes and roles that you need when you configure Splunk Phantom to use an external Splunk instance for search data.

Splunk Phantom Remote Search
Splunk Phantom can use an external Splunk instance as the main search engine to search for Splunk Phantom data. To do this, install this Splunk Phantom Remote Search app on your Splunk instance to connect your Splunk instance and your Splunk Phantom instance.