All Apps and Add-ons

Cisco eStreamer for Splunk: Why is the app status varying between Error ("ERROR: The app has not yet been setup") and Running ("eStreamer client is running")?

NuHarborJordan
Engager

The app is running fine however it is cycling between:

event_sec=1499353290 status_id=1 status="eStreamer client is running."

and

event_sec=1499353285 status_id=-1 status="ERROR: The app has not yet been setup."

These two events happen in tandem and I believe are due to the versions of FTD and FMC:
FirePower (FTD) is version 6.1.0.4 and FMC is version 6.2.1

I've seen hints of this in other answers but curious if anyone else has run into this issue before?

douglashurd
Builder

A new Splunk Firepower solution is now available if you are using Firepower version 6.x. You can download the new eStreamer eNcore for Splunk and the separately installable dashboard from the two links below:

eStreamer eNcore
https://splunkbase.splunk.com/app/3662/

eNcore Dashboard
https://splunkbase.splunk.com/app/3663/

It is free to use and well documented but if you would like to purchase a TAC Support service so that you can obtain installation and configuration assistance and troubleshooting you can order the software from Cisco (support obligatory with this purchase). The Product Identifier is: FP-SPLUNK-SW-K9.

Regardless of whether you take up the support option or not, updated versions will be made available to all free of charge and posted on Splunkbase as well as Cisco Downloads.

0 Karma

NuHarborJordan
Engager
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...