mssite.blogg.se - Siemens splunk phantom

Siemens splunk phantom verification#

In this example we will create a new automation user.

You can either use the default automation user and change the allowed IP addresses, or create a new automation user.

From the main menu, select Administration.

Navigate to your Splunk Phantom or Splunk SOAR instance.

To get an authorization token, follow these steps:

To add a new server, use an authorization token from Splunk Phantom or Splunk SOAR.

Navigate to the Phantom App for Splunk installed on your Splunk platform instance.

Siemens splunk phantom verification#

Return to the Phantom Server Configuration page and verify that the HTTPS certificate verification is disabled message appears with a warning icon.Run the following command and provide the proper username, password, and splunkaddress:.(Optional) If you have not configured certificates for Splunk Phantom and the Splunk platform, you must disable HTTP validation on the Splunk Platform.See Enable Splunk platform users to use the Splunk Phantom App for Splunk. Before you begin, make sure you have added the required roles to the admin user.

To configure a Splunk Phantom server, follow these steps: Connect the Splunk Phantom App for Splunk and the Splunk Platform to a Splunk Phantom server or Splunk SOARĬonfigure a Splunk Phantom server so that the Splunk Phantom App for Splunk and the Splunk platform can connect to your Splunk Phantom or Splunk SOAR instance.