Troubleshooting - CrowdStrike/falcon-orchestrator GitHub Wiki

This page identifies commonly encountered errors and recommended steps to troubleshoot/resolve the issue.

File Extraction / Memory Acquisition

Error: Exception calling UploadFile with "2" argument(s): "Unable to connect to the remote server"

Cause/Solution: When attempting to extract a file or memory from a remote endpoint you may encounter this error. This is an indication that the PowerShell script being launched on the endpoint cannot contact the Orchestrator server in order to POST the file. When browsing to the Falcon Orchestrator web application the IP address/hostname used is what the remote endpoint will leverage for sending files back to the server. As such, you must browse to an IP/hostname that is accessible to the remote endpoint you intend to extract files from. Do not use 127.0.0.1 or localhost.