Splunk® SOAR (On-premises)

Install and Upgrade Splunk SOAR (On-premises)

Acrobat logo Download manual as PDF


This documentation does not apply to the most recent version of Splunk® SOAR (On-premises). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Install to an existing server with RPM

Use this method to install on local hardware or a cloud service, such as AWS or Azure. Use your Community credentials during the installation.

Prerequisites

Contact support to get the specific installation package you need. You can open a support case at Splunk Support and Services or by calling +1(855)SPLUNK-S or +1(855)775-8657. International Splunk Support numbers are found in the Contact Us section of the Splunk website.

Add the required additional YUM repositories for your operating system.

Some users may need edit the /etc/yum.repos.d/redhat-rhui.repo file to enable the additional Red Hat Enterprise Linux repository. AWS users must do so on their AWS instance.

Operating System Repositories
CentOS 7.6 -7.9 os
updates
Red Hat Enterprise Linux 7.6 - 7.9 rhel-7-server-rpms
rhel-7-server-optional-rpms
rhel-server-rhscl-7-rpms
Red Hat Enterprise Linux on AWS rhui-<region>-rhel-server-optional

Update the operating system and dependencies

Do these actions either as the root user or a user with sudo permissions.

  1. Contact Support to get access to the required RPM files. Once access has been granted, you can download the file from the Splunk SOAR site.
  2. Clear YUM's caches.
    yum clean all
  3. Update the operating system and all installed packages.
    yum update
  4. Restart the operating system.
    shutdown -r now

Install

Perform the following tasks to install :

  1. As either root or a user with sudo access, run RPM to add the required repositories, GPG keys, and the installation script.
  2. As either root or a user with sudo access, run the installation script.
    /opt/phantom/bin/phantom_setup.sh install --version=5.0.1.66250-1
    Provide your Splunk Phantom community credentials when prompted for a username and password.

For more installation command line options, see phantom_setup.sh options.

If you need to download the RPM, see Install on a system with limited internet access.

Next step: log in to verify the installation

You can log in to the web interface after the setup script completes to configure user accounts and additional settings. See Log in to the web interface.

Last modified on 14 September, 2023
PREVIOUS
Install as a virtual machine image
  NEXT
Install on a system with limited internet access

This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.0.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters