Installation

Unable to install Splunk Phantom on CentOS

vikramyadav
Contributor

I'm trying to install Splunk Phantom on  CentOS server but I'm getting the below error.

About to proceed with Phantom install
Do you wish to proceed [y/N]
y
sed: can't read /opt/phantom/bin/stop_phantom.sh: No such file or directory

Enter username: vikram@abc.com
Enter password: **********
./phantom_setup.sh: line 357: python: command not found
./phantom_setup.sh: line 358: python: command not found
21 files removed
Updating phantom repo package


Error updating Phantom Repo package

Errors during downloading metadata for repository 'phantom-base':
- Status code: 404 for https://***@repo.phantom.us/phantom/4.5/base/8/x86_64/repodata/repomd.xml (IP: 54.165.15.205)
Error: Failed to download metadata for repo 'phantom-base': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Labels (2)
0 Karma

codebuilder
SplunkTrust
SplunkTrust

Are you installing as root or a privileged user? The /opt directory is owned by root so only one of those two can write there.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

vikramyadav
Contributor

Yes, @codebuilder I'm installing phantom via root user.

0 Karma

codebuilder
SplunkTrust
SplunkTrust

Looks like the network on your box can't reach the repo, or the repo url itself isn't correct. Try doing an nslookup or ping on the fqdn listed in your url.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...