Splunk® App for SOAR Export

Use the Splunk App for SOAR Export to Forward Events

Upgrade Splunk App for SOAR Export on Splunk Enterprise

Upgrade Splunk App for SOAR Export to ensure that you can use the full functionality of the add-on.

Before you begin

Before upgrading Splunk App for SOAR Export, back up your files from the command line by copying the complete directory $SPLUNK_HOME/etc/apps/phantom to another location that's not under $SPLUNK_HOME/etc/apps.

Steps to upgrade Splunk App for SOAR Export

To upgrade to Splunk App for SOAR version 4.3.21, complete the following steps in order:

  1. Upgrade to Splunk CIM (Splunk Common Information Model) version 6.0.x or install Splunk Enterprise Security version 8.0.x.
  2. Upgrade to Splunk App for SOAR version 4.3.21.

Detailed steps:

  1. From Splunkbase, download version 6.0.x of Splunk CIM or version 8.0.x of Splunk Enterprise Security.
  2. Go to your Splunk Enterprise instance.
  3. In the apps panel, click the gear icon.
  4. Select Install app from file.
  5. Upload the app file you downloaded from Splunkbase.
  6. Select the checkbox to upgrade the add-on. Making this selection overwrites the add-on if it already exists.
  7. Your Splunk Enterprise instance restarts to complete the upgrade.
  8. Repeat the previous steps, downloading version 4.3.21 of Splunk App for SOAR Export from Splunkbase.
Last modified on 16 October, 2024
Install the Splunk App for SOAR Export on Splunk Enterprise   Check prerequisites for Splunk App for SOAR Export on Splunk Cloud Platform

This documentation applies to the following versions of Splunk® App for SOAR Export: 4.3.21


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters