Splunk SOAR

How do I restart SOAR related services?

footyman
Engager

Hi, I installed Splunk SOAR (on-premises)6.2.2 On a single server. Does anyone know how to get SOAR related services up and running again after the server restarts? Thank you!😀

Labels (1)
0 Karma
1 Solution

SOARt_of_Lost
Path Finder
  1. cd /opt/phantom/bin
  2. sudo su phantom
  3. ./start_phantom.sh

View solution in original post

marnall
Motivator

By default when you install SOAR, it should use a "SOAR user" which will then be automatically given a cronjob with "@restart", thereby starting SOAR automatically when you restart the server.

0 Karma

SOARt_of_Lost
Path Finder
  1. cd /opt/phantom/bin
  2. sudo su phantom
  3. ./start_phantom.sh

footyman
Engager

Thank you ever so much

0 Karma
Get Updates on the Splunk Community!

Announcing the Expansion of the Splunk Academic Alliance Program

The Splunk Community is more than just an online forum — it’s a network of passionate users, administrators, ...

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...