Onboard Splunk Cloud Platform or Splunk Enterprise Security data
Onboarding Splunk Cloud Platform alerts, notables, or event forwarding can be configured in the same way as Splunk SOAR (On-premises). See the Splunk App for SOAR Export documentation.
Note: Be sure to perform end to end testing prior to decommissioning your existing production environment.