All Apps and Add-ons

Splunk Add-on for Check Point OPSEC LEA: Why is lea_loggrabber crashing?

shftleft
Engager

Running into an issue with the latest version of the Splunk Add-on for Check Point OPSEC LEA. Everything is configured and connects properly with the LEA connection, but when lea_loggrabber fires up, it crashes with the following error:

[ 21382 4152240960]@CIS-SPLUNKFWDW[18 Aug 12:26:24] PM_apply_default_dn: calling PM_policy_DN_conversion ..
[ 21382 4152240960]@CIS-SPLUNKFWDW[18 Aug 12:26:24] PM_apply_default_dn: finished successfully.
lea_loggrabber: ../sysdeps/unix/sysv/linux/getpagesize.c:32: __getpagesize: Assertion `_rtld_global_ro._dl_pagesize != 0' failed.
Aborted

Any ideas?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Looks like glibc bug? Patch your box see if that helps.

https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/672352

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...