All Apps and Add-ons

Cisco eStreamer for Splunk: Why am I receiving "ERROR: There is no Defense Center defined" after configuration?

hassanali
Explorer

I am using Splunk 6.4 and the Cisco eStreamer for Splunk app. When I follow the steps to install the app and connect to Defense Center by:

1) Generate certificate in Defense Center, import to Splunk indexer
2) Edit estreamer.conf to provide
i) Defense Center IP
ii) certificate path
iii) provide password (none in my case)
3) Configure eStreamer app from within Splunk with similar parameters

I am not able to get the events streaming. The error that I get is "ERROR: There is no Defense Center defined."

0 Karma
1 Solution

hassanali
Explorer

Yes.
I was able to get it fixed by re-installing the app.

View solution in original post

0 Karma

hassanali
Explorer

Yes.
I was able to get it fixed by re-installing the app.

0 Karma

douglashurd
Builder

did this get resolved for you?

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...