Reinstall or revert Modern or Classic Splunk SOAR Automation Brokers

If there is a problem with your Splunk SOAR Automation Broker installation, you can reinstall the Splunk SOAR Automation Broker.

If you need to reinstall or revert the Splunk SOAR Automation Broker to an earlier release, you must set up the connection with Splunk SOAR (Cloud) or Splunk SOAR (On-premises) again.

Perform these steps in combination with the Splunk SOAR administrator, if you are not the Splunk SOAR administrator.

Note: If you reuse an existing directory for persistent data, you do not need to reregister the Splunk SOAR Automation Broker. If the problem that requires you to reinstall is due to stale or bad data in your persisted data, you must create a new directory and reregister.

To reinstall or revert Modern or Classic Splunk SOAR Automation Brokers follow these steps.

  1. As a user with docker or podman permissions, stop the Splunk SOAR Automation Broker by locating the running container for the broker, then stopping the container.
    • For Docker:
      CODE 
      docker ps
      CODE 
      docker stop <container_name>
    • For Podman:
      CODE 
      pdoman ps
      CODE 
      podman stop <container_name>
  2. After you have stopped the container, you can install the Splunk SOAR Automation Broker by following the installation instructions.

    You might be able to skip some steps in the installation instructions.

    • If you already have the container image you need, you might skip steps to obtain a new container image.
    • If you are reusing the data directory, you can skip steps related to creating and assigning permissions to a data directory.
    • If you are reusing the data directory, you can skip steps related to registering your Automation Broker with Splunk SOAR (Cloud) or Splunk SOAR (On-premises).