topic Re: Cisco Security Suite - cannot configure in All Apps and Add-ons

Cisco Security Suite - cannot configure

pil321 — Tue, 09 Jan 2018 17:44:17 GMT

I've just installed Cisco Security Suite (v 3.1.2) on Splunk (v 7.0.1).

When I launch the app, it takes me to the 'App configuration' screen. I click on the 'Continue to app setup page' button and I get this:

500 Internal Server Error

View more information about your request (request ID = 5a54fe1e947fcd584de350) in Search

When I click on the 'View.....' link above, the search has no results.

Any ideas?

Re: Cisco Security Suite - cannot configure

p_gurav — Wed, 10 Jan 2018 10:25:18 GMT

Hi pil321,

Please refer below link:
https://answers.splunk.com/answers/451423/cisco-security-suite-312-after-installation-are-we.html

Re: Cisco Security Suite - cannot configure

pil321 — Wed, 10 Jan 2018 12:10:16 GMT

Thanks for your reply p_gurav.

Unfortunately, this did not work for me.

Re: Cisco Security Suite - cannot configure

p_gurav — Wed, 10 Jan 2018 12:35:48 GMT

Could you please check app permission in app manager?

Re: Cisco Security Suite - cannot configure

p_gurav — Wed, 10 Jan 2018 12:41:04 GMT

Also can you tell me what value you set for Timeout? Did You restart splunk service after that?

Re: Cisco Security Suite - cannot configure

pil321 — Wed, 10 Jan 2018 14:21:28 GMT

Everyone has read permissions. Admin has write permissions.

Re: Cisco Security Suite - cannot configure

pil321 — Wed, 10 Jan 2018 14:22:10 GMT

Timeout is 300. Splunk service was restarted.

Re: Cisco Security Suite - cannot configure

p_gurav — Wed, 10 Jan 2018 14:33:05 GMT

ohh!! Because in app document they said:

Known Issues

3.1.2
- Package name still has "Splunk_" prefix. This is required if keeping same Splunkbase path yet this app is no longer Splunk supported
- splunkdConnectionTimeout may still need to be set artificially high on some systems for the setup experience

Could you also check in index=_internal logs to find root cause..

Re: Cisco Security Suite - cannot configure

p_gurav — Wed, 10 Jan 2018 14:41:58 GMT

Also try Option 2 specified in this thread:

https://answers.splunk.com/answers/523408/cisco-security-suite-setup-failure.html

Re: Cisco Security Suite - cannot configure

mwisniewski9 — Tue, 29 Sep 2020 18:07:14 GMT

Hello,

I had the exact same issue today on splunk 7.0.1. I did increase the search time as others have recommended but what finally solved it seems to be is just skipping the setup configuration page. I'm only monitoring Cisco ASA and IOS devices

I followed the instructions in this thread. and set my etc/apps/Splunk_CiscoSecuriySuite/local/app.conf for is_configured = true
https://answers.splunk.com/answers/12702/splunk-cisco-security-suite.html

Re: Cisco Security Suite - cannot configure

Anam — Wed, 14 Feb 2018 19:26:31 GMT

Hello mwisniewski9

This question was posted a little over a month ago, it would be best to post a brand new question to get maximum exposure and help for your problem. If the answers here weren't able to solve your problem, please post a new question.

Thanks

Re: Cisco Security Suite - cannot configure

mwisniewski9 — Wed, 14 Feb 2018 20:02:01 GMT

I am trying to submit my response as an answer to their problem. What would be the best way to do that. I had the same issue.

Re: Cisco Security Suite - cannot configure

Anam — Wed, 14 Feb 2018 20:17:10 GMT

Hi mwisniewski9

Thank you for answering! I just converted your comment into an answer.

Re: Cisco Security Suite - cannot configure

mwisniewski9 — Wed, 14 Feb 2018 20:27:37 GMT

Thanks! I appreciate it 🙂