COMMUNITY OFFICE HOURS

Security: SOAR

Register Now

Technical Splunk experts answer questions and provide how-to guidance

Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

What can I ask in this AMA?

• What are the latest features of SOAR that I should know about?
• How do Splunk SOAR Playbooks and Actions integrate with Splunk Enterprise Security?
• How can I leverage the Automation Rules feature to assign playbooks to detections and automate the process?
• What are the best practices for developing playbooks, workbooks, and process workflows?
• How do I implement Guided Automation to further optimize the playbook-building process?
• What are the best practices for setting up prompts in SOAR?
• Anything else you’d like to learn!

Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here).

Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.