Splunk SOAR (Cloud) is a cloud-based Security Orchestration, Automation, and Response (SOAR) system that is delivered as a SaaS (software-as-a-service) solution hosted and managed by Splunk. Splunk SOAR (Cloud) delivers the benefits of Splunk SOAR (On-premises) as a cloud-based service. Splunk SOAR (On-premises) users who have purchased Splunk SOAR (Cloud) have the option to migrate their existing Splunk SOAR (On-premises) administration settings, applications, playbooks, and custom functions for use in Splunk SOAR (Cloud). Although Splunk SOAR (On-premises) and Splunk SOAR (Cloud) share many similarities, there are a few restrictions within Splunk SOAR (Cloud) to consider before deciding whether or not to perform the cloud migration. See Restrictions within Splunk SOAR (Cloud). To perform the migration process, complete the following tasks:

• Convert all Splunk SOAR (On-premises) custom apps, playbooks, and custom functions to use Python 3, see Prerequisites for migrating from Splunk SOAR (On-premises) to Splunk SOAR (Cloud).
• Reconfigure or migrate your Splunk SOAR (On-premises) administration settings, see Migrate Splunk SOAR (On-premises) administration settings to Splunk SOAR (Cloud).
• Migrate your Splunk SOAR (On-premises) applications, see Migrate Splunk SOAR (On-premises) applications to Splunk SOAR (Cloud).
• Migrate your Splunk SOAR (On-premises) playbooks and custom functions, see Migrate Splunk SOAR (On-premises) playbooks and custom functions to Splunk SOAR (Cloud).
• Onboard Splunk Cloud Enterprise or Splunk Enterprise Security data, see Onboard Splunk Cloud Enterprise or Splunk Enterprise Security data.