Closing this box indicates that you accept our Cookie Policy.
Splunk SOAR (On-premises) is a Security Orchestration, Automation, and Response (SOAR) system that customers can install and configure in their own environments.
Release Notes
What's new in the latest release of Splunk SOAR.
Install and Upgrade Splunk SOAR (On-premises)
Install and upgrade Splunk SOAR (On-premises).
Get Started with the Splunk Mobile App for Splunk SOAR (On-premises)
Use the Splunk Mobile App for Splunk SOAR (On-premises) to take action directly from your mobile device.
Administer Splunk SOAR (On-premises)
Administer Splunk SOAR and customize the desired product settings.
Use Splunk SOAR (On-premises)
Learn how to use Splunk SOAR for security orchestration and automation using playbooks, workbooks, and cases.
Build Playbooks with the Playbook Editor
Learn how to create and manage playbooks in Splunk SOAR to automate analyst workflows.
Python Playbook API Reference for Splunk SOAR (On-premises)
Reference documentation for the Python automation API in Splunk SOAR.
Python Playbook Tutorial for Splunk SOAR (On-premises)
Tutorial for the Splunk SOAR Playbook API.
REST API Reference for Splunk SOAR (On-premises)
Reference documentation for Splunk SOAR REST API endpoints.
Develop Apps for Splunk SOAR (On-premises)
A technical development guide to help you develop your own Splunk SOAR apps.
Splunk® Phantom App for Splunk
The Splunk Phantom App for Splunk translates and forwards information from the Splunk platform to a Splunk Phantom instance. A new version of this App, named Splunk App for Splunk SOAR Export, is available for SOAR.
Splunk® Phantom Remote Search
Splunk Phantom Remote Search defines indexes and roles that you need when you configure Splunk Phantom to use an external Splunk instance for search data. A new version of this App, named Splunk App for Splunk SOAR, is available for SOAR.
Splunk® Add-on for Splunk Phantom
The Splunk Add-on for Splunk Phantom allows ITSI and Splunk Enterprise to get Splunk Phantom log data. Required to use the content pack for Monitoring Splunk Phantom as a Service. A new version of this Add-on, named Splunk App for Splunk SOAR, is available for SOAR.