Troubleshooting

This section provides information to help you solve problems that you might encounter when using Kaspersky Threat Intelligence Portal for Splunk Phantom.

Problem: The connection test failed

If the connection test failed, check the following:

• Accuracy of the login and password
• Accuracy of the certificate
• Whether there is access to the Kaspersky Threat Intelligence Portal API

  If there is no access to the Kaspersky Threat Intelligence Portal API, the error message will tell you about this fact.

• Whether proxy settings are set in Splunk Phantom that allow you to use Kaspersky Threat Intelligence Portal
• Whether you have accepted the Terms and Conditions of Kaspersky Threat Intelligence Portal

Problem: The error message "Request not processed: quota exceeded" is displayed

You have used your daily quota of requests and cannot make any request today. Please wait for tomorrow.

You can learn the number of requests made today and your daily quota of requests as follows:

1. In Splunk Phantom, click the Home split button and in the drop-down list select Apps.
2. For the Kaspersky Threat Intelligence app expand 1 configured asset.
3. Click the asset that appears.

   The form that contains the app settings opens.

4. In the ASSET CONFIGURATION section, select the Asset Settings tab.
5. Click TEST CONNECTIVITY.

   The Testing connectivity dialog box opens, displaying your daily request quota and the number of requests made today.

Problem: The error message "Your account doesn't have access to the Kaspersky Threat Intelligence Portal API" is displayed

If this error message is displayed when you make a test request to Kaspersky Threat Intelligence Portal, try the following action:

• Ask the administrator who gave you the user name and password whether your account has access to the Kaspersky Threat Intelligence Portal API.

Problem: The error message "The Terms and Conditions of Kaspersky Threat Intelligence Portal were not accepted" is displayed

If this error message is displayed when you make a test request to Kaspersky Threat Intelligence Portal, try the following action:

• Go to Kaspersky Threat Intelligence Portal (https://tip.kaspersky.com/) and accept the Terms and Conditions.