Check prerequisites for
Check that your environment is ready to use Splunk App for SOAR to integrate Splunk SOAR with Splunk Cloud Platform or Enterprise.
Required user privileges and ports
Verify the following user privileges and ports:
- Splunk SOAR must have TCP ports 443 and 8089 open to and from Splunk Enterprise Security (ES) search heads.
- In your on-premises deployment, verify that you have the necessary network availability among all devices.
Splunk product compatibility requirements
Use this matrix to determine the compatibility of Splunk App for SOAR with certain versions of Splunk Cloud Platform or Enterprise and Splunk SOAR (Cloud) or (On-premises). You may use all versions that appear in a single row interchangeably.
Splunk App for SOAR version | Splunk Enterprise version | Splunk Cloud Platform version | Splunk Enterprise Security version / ITSI version | Splunk SOAR (On-premises) version | Splunk SOAR (Cloud) Version |
---|---|---|---|---|---|
1.0.0 | 9.0.2209 | ITSI 4.15.0 | 5.4.0 | 5.4.0 | |
9.0.2209 | -- | 5.3.4, 5.3.5 | 5.3.4, 5.3.5 | ||
9.0.2208 | -- | 5.3.4, 5.3.5 | 5.3.4, 5.3.5 | ||
9.0.2205 | -- | 5.3.2, 5.3.3 | 5.3.2, 5.3.3 | ||
8.2.2203, 8.2.2202 | -- | 5.3.2 | 5.3.2 | ||
9.0.1 | ITSI 4.15.0 | 5.4.0 | 5.4.0 | ||
9.0.0 | -- | 5.3.2, 5.3.x | 5.3.2, 5.3.x | ||
8.2.8 | -- | 5.3.2 | 5.3.2 |
Learn about Splunk App for SOAR | Install Splunk App for SOAR on Splunk Enterprise |
This documentation applies to the following versions of Splunk® App for SOAR: 1.0.0
Feedback submitted, thanks!