Issues With Cisco Security Cloud app

dm1 — Thu, 30 Jul 2026 05:06:25 GMT

The documentation of this app and the issues I am facing with this app is quite shocking.

Firstly, no documentation on how to migrate from deprecated Estreamer addon to this new "app"
After I installed the app, I keep getting this error even if opened browser in incognito mode
Doc mentions the below but there is literally ZERO logs in this file.
Tracks input creation, connectivity to Cisco APIs, and error responses from connectors.
```
$SPLUNK_HOME/var/log/splunk/CiscoSecurityCloud/CiscoSecurityCloud.log
```
After looking at some other posts, seems like this is a pretty common issue but struggled to find a solution to make this work.
Here they say "Modify the outputs.conf file to store the _internal index locally" Pretty strange

Can someone please help with this ?

Re: Issues With Cisco Security Cloud app

dm1 — Thu, 30 Jul 2026 07:02:28 GMT

Works well with 4.0.1 version.