Splunk SOAR (f.k.a. Phantom)

VPE Debugger Issue. No response on test

johnteo
Explorer

Hi guys, for all of the playbooks I have executed and tried to test in the past 24 hours, none of them have successfully executed although no changes have been made to them and they worked fined previously.

The only output at Phantom would be Status: Running. However, upon further inspection the count of failures for running that playbook is increased by 1 for every time I test it.

All the assets are healthy and I have not exceeded he maximum number of actions. I would very much appreciate any assistance and insights offered!

Labels (1)
Tags (1)
0 Karma
1 Solution

ansusabu
Communicator

Have you checked the memory utilization? OR try restarting the Phantom server.

View solution in original post

0 Karma

ansusabu
Communicator

Have you checked the memory utilization? OR try restarting the Phantom server.

0 Karma

johnteo
Explorer

Hi, thanks for responding. I have checked the memory utilization and restarted the statuses under system health. Everything seems fine on that end.

How do I restart the Phantom Server?

0 Karma

ansusabu
Communicator

You can stop the phantom server using the script using the stop script available in the below location

/opt/phantom/bin/stop_phantom.sh

And start the server using the below script :

/opt/phantom/bin/start_phantom.sh
0 Karma

johnteo
Explorer

I apologize for such a basic question.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...