SC4S and McAfee EPO not working?

domino30 — Wed, 17 May 2023 13:46:10 GMT

So I have been trying to get SC4S working and I know where the docs are--> https://splunk.github.io/splunk-connect-for-syslog/main/

I have followed this well and gotten SC4S event in and have tested HEC data in successfully.

However for some reason I cant get Epo data in I am attaching image of my env_file and proof that I got SC4S working. as well as a concern.

I need to know what I should change.

Thanks.

Re: SC4S and McAfee EPO not working?

elf337 — Thu, 21 Dec 2023 16:49:05 GMT

i failed too... end up with setting up syslog-ng with TLS.