Splunk Enterprise Security

Threat Intelligence download remains stuck on csv doanload

wishfor
Engager

I added a new Threat Intelligence Download and in the Audit dashboard I can constantly see that the feed on "csv download starting" stage, it never proceeds further. The feed requires a api key which I added as a remote site user so it does proceed beyond the authentication phase. It is a csv feed which only downloads the domains so there should be not much of extraction required I believe.

Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...