Splunk SOAR (f.k.a. Phantom)

Phantom integration giving the ssl error, how to disable them?

thirumaleshsplu
Explorer

I am seeing the below issue,
Httpsconnectionpool(host='phantomdev..com', port=XXX): max retries exceeded with url: /rest/ph_user?include_automation=true&filter_token_key='' (caused by sslerror(sslerror(1, u'[ssl: certificate_verify_failed] certificate verify failed (_ssl.c:741)'),))

i was trying to disable the ssl, which was in README, was not able to succeeded because of i haven't seen those conf.

Labels (2)
0 Karma

sam_splunk
Splunk Employee
Splunk Employee

Did the link and advice from @ansusabu and/or @WalshyB help you get this solved?

0 Karma

ansusabu
Communicator

You can use the curl command given in README for disabling ssl

0 Karma

WalshyB
SplunkTrust
SplunkTrust

https://docs.splunk.com/Documentation/PhantomApp/2.7.5/Install/ConfigureCerts, see "Manage HTTPS certificate validation using configuration files", did you do those steps followed by a restart?

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...