Splunk® SOAR (On-premises)

Use Splunk SOAR (On-premises)

The classic playbook editor will be deprecated in early 2025. Convert your classic playbooks to modern mode.
After the future removal of the classic playbook editor, your existing classic playbooks will continue to run, However, you will no longer be able to visualize or modify existing classic playbooks.
For details, see:

Navigate with the Wayfinder

Use shortcuts in the Wayfinder in to quickly navigate to useful waypoints (destinations) within , like viewing your pending prompts, viewing events or cases assigned to you, or creating a new playbook or custom function.

You can also use the Wayfinder as a basic to-do list. It displays color-coded summary views of your events and cases, so you can quickly see what needs your attention.

Access and use the Wayfinder

You can access the Wayfinder in two ways:

  • Select the compass icon image of compass icon used to access the full Wayfinder near your login name
  • Press the period key (.) on your keyboard


Use the search field at the top of the Wayfinder to find a Wayfinder destination, rather than scrolling through the list.

Note that the Wayfinder list does not update in real time. If a case is created while you are viewing the Wayfinder, that case will not appear until you open the Wayfinder again.

Prioritize your recent and urgent work

The Wayfinder displays your recent and most urgent assigned events, prompts, and approvals in their corresponding sections. You can see color-coded information, including status, severity, which help you prioritize your work. Select any entry to navigate directly to it in .

Keyboard shortcuts

Use this menu to learn and remember keyboard shortcuts for common destinations in .

To view destinations with keyboard shortcuts:

  • Select the keyboard icon image of keyboard icon used to access keyboard shortcuts near your login name
  • Press the question mark key (?) key on your keyboard

These keyboard shortcuts are not available when creating and modifying playbooks using the Visual Playbook Editor (VPE). The VPE has its own keyboard shortcuts. For details, see Use keyboard shortcuts in the playbook editor.

Turn off keyboard shortcuts

If you do not want to use keyboard shortcuts, you can turn them off. This setting does not affect keyboard shortcuts used in the Visual Playbook Editor.

To turn off Wayfinder keyboard shortcuts, follow these steps:

  1. In , select your account user name.
  2. Select Account settings.
  3. Clear the Use keyboard shortcuts for navigation checkbox.
  4. Select Save changes.
Last modified on 19 September, 2024
Access Account Settings   Start with Investigation in

This documentation applies to the following versions of Splunk® SOAR (On-premises): 6.3.0, 6.3.1


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters