About migrating from Splunk Phantom to Splunk SOAR (Cloud)

Splunk SOAR (Cloud) is a cloud-based Security Orchestration, Automation, and Response (SOAR) system that is delivered as a SaaS (software-as-a-service) solution hosted and managed by Splunk. Splunk SOAR (Cloud) delivers the benefits of Splunk Phantom as a cloud-based service. Splunk Phantom users who have purchased Splunk SOAR (Cloud) have the option to migrate their existing Splunk Phantom administration settings, applications, playbooks, and custom functions for use in Splunk SOAR (Cloud). Although Splunk Phantom and Splunk SOAR (Cloud) share many similarities, there are a few restrictions within Splunk SOAR (Cloud) to consider before deciding whether or not to perform the cloud migration. See Restrictions within Splunk SOAR (Cloud). To perform the migration process, complete the following tasks:

• Convert all Splunk Phantom custom apps, playbooks, and custom functions to use Python 3, see Prerequisites for migrating from Splunk Phantom to Splunk SOAR (Cloud).
• Reconfigure or migrate your Splunk Phantom administration settings, see Migrate Splunk Phantom administration settings to Splunk SOAR (Cloud).
• Migrate your Splunk Phantom applications, see Migrate Splunk Phantom applications to Splunk SOAR (Cloud).
• Migrate your Splunk Phantom playbooks and custom functions, see Migrate Splunk Phantom playbooks and custom functions to Splunk SOAR (Cloud).
• Onboard Splunk Cloud Enterprise or Splunk Enterprise Security data, see Onboard Splunk Cloud Enterprise or Splunk Enterprise Security data.