topic Re: Phantom - Testing Connectivity no response in Splunk SOAR

Phantom - Testing Connectivity no response

PwC-Kimmy — Mon, 12 Apr 2021 09:43:21 GMT

Hi All, I run the 'Testing Connectivity' on all Phantom apps and the response is as follows, showing no information (not even if the connection fails).

How do I troubleshoot and resolve this error?

Re: Phantom - Testing Connectivity no response

phanTom — Mon, 12 Apr 2021 10:31:26 GMT

@PwC-Kimmy

How many apps and which specifically have you tried?

Have you tried using one of the app actions after this test connectivity to see if they work?

Have you check system health for all daemons firing, or restarted phantom?

Also, have you tried clearing the browser cache or using a different browser?

Sorry for all the questions, but this is a hard one to troubleshoot without access 😄

Re: Phantom - Testing Connectivity no response

PwC-Kimmy — Tue, 13 Apr 2021 03:39:05 GMT

@phanTom

Thank you for your help.

I tried all the apps (like WHOIS) in the Phantom and they all returned the same result.

Although ‘Test Connectivity’ does not display information, the app is actually working.

I tried restarting the Phantom instance, also using a different browser and a different computer.

Re: Phantom - Testing Connectivity no response

PwC-Kimmy — Tue, 13 Apr 2021 06:41:25 GMT

@phanTom

Our security team enabled SELinux on the server, which caused the problem, and when we disabled SELinux, everything went back to normal.

Thanks again for your help!

Re: Phantom - Testing Connectivity no response

ephemeric — Mon, 23 Aug 2021 12:53:28 GMT

Check for any SELinux denies:

grep "denied" /var/log/audit/audit.log