Cisco Security Cloud Estreamer Issues

Rafaelled — Tue, 17 Feb 2026 18:14:51 GMT

Good Afternoon,

I have been at war with the estreamer app for 2 weeks and I can not get this to work. Below is the current specs:

RHEL 9.5 With FIPS
Splunk 9.4.4 HF
FMC 7.4.2.4

Cisco Security Cloud 3.6.1

So I had issues with fips and the cert, i was able to fix that. I then ran into network connectivity issues and that was resolved. I can openssl with the estreamer cert to the FMC on port 8302 and have no issues connecting to it with TLS. The issue occurs when I set up the estreamer inputs on the Cisco Security Cloud app. When I put in the password and all the information the input fails and below are the logs of the issue. I cant seem to find anything online on this issue with estreamer.

Any help would be great, Thank you

2026-02-17 12:50:38,776 INFO [collect_events] validate_connection():195 Get test chunk of events for input test 2026-02-17 12:50:38,777 INFO [estreamer_connection] get_events():145 Getting events 2026-02-17 12:50:38,777 INFO [collect_events] validate_connection():205 Clean up after eStreamer validation process: test 2026-02-17 12:50:38,778 INFO [collect_events] validate_connection():211 Delete certificate files 2026-02-17 12:50:38,778 ERROR [sbg_fw_estreamer_input] validate_input():180 instance=test, error_type=Connection, error_code=error, error_detail=Struct error occurred, probably invalid format of data, traceback=unpack requires a buffer of 2 bytes, filter_value=sbg_fw_estreamer_input.py,

Re: Cisco Security Cloud Estreamer Issues

ecentonze — Fri, 24 Apr 2026 16:47:02 GMT

I am hitting this same issue with FMC version 7.6.5 and Splunk 9.4.2

topic Cisco Security Cloud Estreamer Issues in Getting Data In

Cisco Security Cloud Estreamer Issues

Re: Cisco Security Cloud Estreamer Issues