Splunk SOAR Certified Automation Developer (SOAR)

A Splunk SOAR Certified Automation Developer* installs, configures, and uses SOAR (formerly Phantom) servers and plans, designs, creates, and debugs basic playbooks for SOAR. These highly skilled individuals are proficient in complex SOAR solution development, and can integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage. This certification demonstrates an individual's knowledge and skills in installing and configuring a SOAR server and integrating it with Splunk, as well as planning, designing, creating, and debugging playbooks.

*Formerly referred to as Splunk Phantom Certified Admin

A complete and very detailed overview of all Splunk Certifications can be found in the Splunk Certification Candidate Handbook.


Candidates for the Splunk SOAR Certified Automation Developer exam are also expected to have working knowledge and experience as either Splunk Cloud or Splunk Enterprise Administrators.

Recommended training for this certification

Candidates who wish to prepare for the Splunk SOAR Certified Automation Developer exam are recommended to complete the following Learning Path: