Hello, I am attempting to utilize the IPS app add-on into Splunk 6, however I'm getting the:
" Error while posting to url=/servicesNS/nobody/Splunk_CiscoIPS/admin/cisco_ips_setup/cisco_ips_setup_settings"
I input the admin/password and IP, not sure if it's asking for the IPS admin account or my splunk admin account, I tried both. Any Splunk experts who can walk me through this, would greatly appreciate.
I just got the same problem and found the answer myself.
You can try to remove these files from file system and restart Splunk.
Then you can reconfig IPS app without the error.
$SPLUNK_HOME/etc/apps/Splunk_TA_cisco-ips/local
app.conf
inputs.conf
passwords.conf