...upport ssh key authentication for the Splunk Phantom warmstandby script (i.e. do not prompt for the password of the OS username that is running Phantom).
I've configured a pair of Phantom servers to use warmstandby. As per the documentation, I ran ibackup.pyc --setup after setting up warmstandby, then ibackup.pyc --backup and it works fine.
I...
Our current SOAR servers, fresh install on AWS EC2s, 500's each night. Upon investigation, it looks like there's this error in the logs: File "/opt/soar/usr/python39/lib/python3.9/site-packages/psyc...
Hello, I am wondering when my index will roll from warm to cold with the settings below, the rest of the settings is default: [XXXX] frozenTimePeriodInSecs = 46656000 maxDataSize = a...
...ssuming that the replication is happening properly,
When my hot bucket rolls to warm, What happens to the rest of the buckets that are replicated on the indexers?
When my warm bucket rolls to c...
Failure to open phantom (4.10.x) GUI after setting up warm/standby , no error message when setup warm/standby and starting phantom. Any further troubleshooting or logs to check ?
we set the buckets to roll from hot into cold for 90 days, but for some reason is not doing it and we are running low on space. How can I manually move buckets from to cold to free space Tha...