Splunk SOAR

How do I restart SOAR related services?

footyman
Engager

Hi, I installed Splunk SOAR (on-premises)6.2.2 On a single server. Does anyone know how to get SOAR related services up and running again after the server restarts? Thank you!😀

Labels (1)
0 Karma
1 Solution

SOARt_of_Lost
Path Finder
  1. cd /opt/phantom/bin
  2. sudo su phantom
  3. ./start_phantom.sh

View solution in original post

marnall
Motivator

By default when you install SOAR, it should use a "SOAR user" which will then be automatically given a cronjob with "@restart", thereby starting SOAR automatically when you restart the server.

0 Karma

SOARt_of_Lost
Path Finder
  1. cd /opt/phantom/bin
  2. sudo su phantom
  3. ./start_phantom.sh

footyman
Engager

Thank you ever so much

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...