How can Splunk SOAR (On-premises) be installed?

Installing Splunk SOAR (On-premises) is the first step to realizing gains from security orchestration and automation. Splunk SOAR (On-premises) allows you to combine security infrastructure orchestration, playbook automation, and case management capabilities to integrate your team, processes, and tools together.

If you are a system administrator who is responsible for setting up Splunk SOAR (On-premises), this guide will help you understand how to get Splunk SOAR (On-premises), the system requirements for installing Splunk SOAR (On-premises), how to install Splunk SOAR (On-premises), as well as clustering, advanced setup, and upgrading Splunk SOAR (On-premises).

Do not use this release to create new deployments of Splunk SOAR (On-premises).

Use this release to upgrade from your current privileged deployment of Splunk Phantom 4.10.7 or Splunk SOAR (On-premises) releases 5.0.1 through 5.3.4.

If you are upgrading a privileged deployment of Splunk Phantom 4.10.7 or Splunk SOAR (On-premises) releases 5.0.1 through 5.3.4, upgrade to release 5.3.6, convert your deployment to unprivileged, then upgrade again directly to Splunk SOAR (On-premises) release 6.1.1 or higher.

If you have a privileged deployment of Splunk SOAR (On-premises) release 5.3.5, convert your deployment to unprivileged, then upgrade directly to Splunk SOAR (On-premises) release 6.1.1 or higher.

To learn how to upgrade see Splunk SOAR (On-premises) upgrade overview and prerequisites.

See also

• Administer Splunk SOAR (On-premises) in the Administer Splunk SOAR (On-premises) manual to learn more about settings and user management.
• About Splunk SOAR (On-premises) in Use Splunk SOAR (On-premises).