Set up the Splunk SOAR Modern Automation Broker manually

set up Automation Brokers without being connected to Docker Hub

If your container host cannot connect to Docker Hub, due to access limitations or policy reasons, get the Splunk SOAR Automation Broker image manually.

Use one of these methods described later to obtain the Splunk SOAR Automation Broker:

Then continue with the last section, Manually install on a Docker or Podman host.

Download the Splunk SOAR Automation Broker from the Splunk SOAR Free Trial Page

Download the Splunk SOAR Automation container image from the Splunk SOAR Free Trial page.

  1. Log in and get the Splunk SOAR Automation Broker container image from the Splunk SOAR Free Trial page.
  2. Copy the image file to your Docker or Podman host.

    Continue with the last section, Manually install on a Docker or Podman host.

Use another system to download the Splunk SOAR Automation Broker

If you cannot access the Splunk SOAR Free Trial page, perform these steps:

  1. On a system that can reach Docker Hub, find the latest Splunk SOAR Automation Broker and Broker Manager images from Docker Hub: Docker Hub. The examples that follow use <version> to stand in for the broker image version.
  2. Load the Docker image into the local Docker or Podman repository by pulling it from Docker Hub.
    For Docker:
    CODE 
    docker pull splunk/soar-automation-broker:<version>
docker pull splunk/soar-broker-manager:latest
    For Podman:
    CODE 
    podman pull splunk/soar-automation-broker:<version>
podman pull splunk/soar-broker-manager:latest
  3. Confirm with docker image ls or podman image ls command that the two images downloaded successfully.
  4. Save the image using the Docker or Podman save command. For more information, search for docker save on Docker Docs or podman save on Podman Docs.

    For Docker:

    CODE 
    docker save -o <path/to/file/<filename-version>.tar splunk/soar-automation-broker:<version>
docker save -o <path/to/file/<filename-version>.tar splunk/soar-broker-manager:latest

    For Podman:

    CODE 
    podman save -o <path/to/file/<filename-version>.tar splunk/soar-automation-broker:<version>
podman save -o <path/to/file/<filename-version>.tar splunk/soar-broker-manager:latest
  5. Copy the image file to your Docker or Podman host.

    Continue with the next section, Manually install on a Docker or Podman host.

Manually install on a Docker or Podman host

Follow these steps to install the Splunk SOAR Automation Broker on your Docker or Podman host without using docker compose.

  1. If you have not already done so, download the Broker Manager and Automation Broker TAR files as described in one of the previous sections.
  2. On the host where you intend to run the Splunk SOAR Automation Broker, load the image you just copied into the local repository using the docker load or podman load command. Search for docker load on Docker Docs or podman load on Podman docs for more information.
    CODE 
    docker|podman load -i <path/to/file/<filename-version>.tar

  3. On the Automation Broker host, place the compose file and initial broker_registration.key in the expected local directory, usually splunk_data.

  4. In the compose file, uncomment and set VERSION=x.y.z to the appropriate release version.
    Note: When upgrading, you must update the VERSION setting for each new release. For example, when upgrading from version 8.7.0 to 8.8.0, change the line from VERSION=8.7.0 to VERSION=8.8.0. Make sure that the Automation Broker image exists, then restart the Broker Manager.
  5. Start the Broker Manager. Refer to the instructions in Create a Modern Splunk SOAR Automation Broker.