Integrating IP2Location.io with Splunk SOAR

Splunk SOAR (formerly Phantom) is a security orchestration, automation, and response platform that improves SOC efficiency by automating routine tasks, integrating security tools, and managing incidents via playbooks. It enables faster threat response times, offers over 350 integrations, and provides both cloud-hosted (SaaS) and on-premises deployment options to automate workflows.

How to use IP2Location.io with Splunk SOAR

1. Download the app from IP2Location.io Splunkbase.
2. Install the IP2Location.io app and configure the IP2Location.io API key in the Splunk SOAR UI. If you don't have the IP2Location.io API key, you can register for a free API key.
3. Then, you can start querying IP addresses to get geolocation data.