Splunk SOAR

How do I restart SOAR related services?

footyman
Engager

Hi, I installed Splunk SOAR (on-premises)6.2.2 On a single server. Does anyone know how to get SOAR related services up and running again after the server restarts? Thank you!😀

Labels (1)
0 Karma
1 Solution

SOARt_of_Lost
Path Finder
  1. cd /opt/phantom/bin
  2. sudo su phantom
  3. ./start_phantom.sh

View solution in original post

marnall
Motivator

By default when you install SOAR, it should use a "SOAR user" which will then be automatically given a cronjob with "@restart", thereby starting SOAR automatically when you restart the server.

0 Karma

SOARt_of_Lost
Path Finder
  1. cd /opt/phantom/bin
  2. sudo su phantom
  3. ./start_phantom.sh

footyman
Engager

Thank you ever so much

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...