Splunk® Phantom Remote Search

Splunk Phantom Remote Search

Download manual as PDF

Download topic as PDF

About the Splunk Phantom Remote Search app

Splunk Phantom can use an external Splunk Enterprise or Splunk Cloud instance as the main search engine to search for Splunk Phantom data. To do this, install the Splunk Phantom Remote Search app on your Splunk instance to connect your Splunk instance to your Splunk Phantom instance.

You can use the Splunk Phantom Remote Search app to connect Splunk Phantom and the Splunk platform in the following ways:

Obtain a Splunk Enterprise license to use the Splunk Phantom Remote Search app

You need a Splunk Enterprise license to use external Splunk Enterprise with Splunk Phantom. If you don't already have a Splunk Enterprise license, work with your delivery team to purchase one.

Version compatibility with Splunk Phantom

The Splunk Phantom Remote Search App is compatible with the following versions of Splunk Phantom:

Splunk Phantom Remote Search App Version Splunk Phantom Version
1.0.12 and earlier 4.6 and earlier
1.0.14 4.8
Last modified on 17 March, 2020
  NEXT
Install and upgrade the Splunk Phantom Remote Search app

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters