LICENSEWARE
Splunk Metric

Playbook Run (Splunk Enterprise Security SOAR)

Catalog row in Vendor License Metrics · Cited

Unit
Playbook run
Definition
Purchase Capacity and Limitations, Splunk Enterprise Security Editions: the SOAR capability in ES Essentials and ES Premier is measured per playbook run.
Counting rules
Maximum 250k SOAR playbook runs per day, whether the ES licence is volume, vCPU or SVC based.
Floors / minimums
Maximum 250,000 playbook runs per day.
Applies to products
  • Splunk Enterprise Security Essentials
  • Splunk Enterprise Security Premier
Esc