topic Phantom Integration with splunk in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Phantom-Integration-with-splunk/m-p/576835#M101900 <P>Hi,<BR /><BR /></P><P>I am using Distributed Splunk Enterprise Deployment (at Phantom end) to ingest phantom logs into splunk. CORE SIT Search Head IP is used here and it is working fine. But when we use ES SIT Search Head IP, I get the error&nbsp; - "Test connection failed for Phantom search on Host - xx.xx.xx.xx"<BR /><BR />Telnet connectivity is working fine for both CORE and ES search heads<BR /><BR />Why we are unable to connect with ES search head?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vijaysri_0-1638327372336.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/17067iD775AA4CACB08CC8/image-size/medium?v=v2&amp;px=400" role="button" title="vijaysri_0-1638327372336.png" alt="vijaysri_0-1638327372336.png" /></span></P><P>&nbsp;</P> Wed, 01 Dec 2021 03:01:37 GMT VijaySrrie 2021-12-01T03:01:37Z Phantom Integration with splunk https://community.splunk.com/t5/Getting-Data-In/Phantom-Integration-with-splunk/m-p/576835#M101900 <P>Hi,<BR /><BR /></P><P>I am using Distributed Splunk Enterprise Deployment (at Phantom end) to ingest phantom logs into splunk. CORE SIT Search Head IP is used here and it is working fine. But when we use ES SIT Search Head IP, I get the error&nbsp; - "Test connection failed for Phantom search on Host - xx.xx.xx.xx"<BR /><BR />Telnet connectivity is working fine for both CORE and ES search heads<BR /><BR />Why we are unable to connect with ES search head?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vijaysri_0-1638327372336.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/17067iD775AA4CACB08CC8/image-size/medium?v=v2&amp;px=400" role="button" title="vijaysri_0-1638327372336.png" alt="vijaysri_0-1638327372336.png" /></span></P><P>&nbsp;</P> Wed, 01 Dec 2021 03:01:37 GMT https://community.splunk.com/t5/Getting-Data-In/Phantom-Integration-with-splunk/m-p/576835#M101900 VijaySrrie 2021-12-01T03:01:37Z