Logging into the Splunk SOAR web interface

[Huckleberry]

Hello,
I set up an Amazon Linux 2 virtual machine in VirtualBox and successfully installed Splunk SOAR. I am trying to log into the web interface. The documentation says to go to the IP address that I assigned to the Splunk SOAR using the custom HTTPS port. I know that I am using the correct port. When I run ifconfig, I see two IP addresses. I tried both with the port I chose for Splunk, but neither is working, and my browser says that the site cannot be reached. Any help would be appreciated.

[livehybrid]

@Huckleberry 

If you cannot access the Splunk SOAR web interface using either IP address shown by ifconfig, the most likely causes are network configuration issues between your host machine and the Amazon Linux 2 VM.

Are you able to SSH into the VM from your host machine? If so, which IP is it you are using? You should be able to access SOAR on the same IP.

The other things that might be worth checking is any firewall rules on the VM. Run the following to see what rules are set, if it fails then its likely that the firewall isnt enabled so shouldnt be the issue. (Firewalld is the default for Amazon Linux I believe)

sudo firewall-cmd --list-all

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing