Skip to main content
Warning
This app is archived. App archiving documentation
Phantom Remote Search app icon

Phantom Remote Search

This app's functionality has been added to the Splunk App for SOAR (https://splunkbase.splunk.com/app/6361/). We recommend you use that app for this functionality and future updates.Built by Splunk LLC
splunk product badge
Default Version 1.0.17

June 3, 2020

Compatibility

Splunk Enterprise

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

Rating
0
(0)

Log in to rate this app

Support
Archived Add-on

This app's functionality has been added to the Splunk App for SOAR (https://splunkbase.splunk.com/app/6361/). We recommend you use that app for this functionality and future updates. The Phantom Remote Search add-on defines indices and roles used by Phantom when configured to use an external Splunk instance for search data. Install this app if you plan to use this Splunk instance as a remote search node for Phantom.