Configure apps and assets in Splunk SOAR

Apps expand the capabilities of Splunk SOAR by connecting to third-party products and services. These third-party products and services provide actions you can run or automate in your Splunk SOAR playbooks. For example, the MaxMind app provides the geolocate_ip action for your Splunk SOAR deployment.

An asset is a specific configuration, or instance, of an app. An asset is configured with the information required to communicate with the third-party product or service, such as IP address, automation service account, username, and password.