https://community.splunk.com/t5/Getting-Data-In/Cisco-IPS-app-not-working-Error-connecting-to-sensor/m-p/22833#M3560 <P>Did you ever get this fixed?</P> <P>If not, what version of the IPS app are you running? Can you ping the IPS from the Splunk server? Can you access <A href="https://Sensor_IP/cgi-bin/sdee-server">https://Sensor_IP/cgi-bin/sdee-server</A> from the Splunk server? What version of the Cisco IPS software are you running?</P> Tue, 19 Feb 2013 05:14:08 GMT andrew_garvin 2013-02-19T05:14:08Z https://community.splunk.com/t5/Getting-Data-In/Cisco-IPS-app-not-working-Error-connecting-to-sensor/m-p/22832#M3559 <P>I've "configured" the Splunk for Cisco IPS application, but I'm getting the following back from the scripted input:</P> <P>Thu Feb 7 12:36:24 2013 - INFO - Checking for exsisting SubscriptionID on host: x.x.x.x</P> <P>Thu Feb 7 12:36:24 2013 - INFO - No exsisting SubscriptionID for host: x.x.x.x</P> <P>Thu Feb 7 12:36:24 2013 - INFO - Attempting to connect to sensor: x.x.x.x</P> <P>Thu Feb 7 12:36:24 2013 - INFO - Successfully connected to: x.x.x.x</P> <P>Thu Feb 7 12:37:39 2013 - ERROR - Connecting to sensor - x.x.x.x: URLError: <URLOPEN error=""></URLOPEN></P> <P>What does URL Error 104 mean</P> Thu, 07 Feb 2013 11:54:30 GMT https://community.splunk.com/t5/Getting-Data-In/Cisco-IPS-app-not-working-Error-connecting-to-sensor/m-p/22832#M3559 aart_bos 2013-02-07T11:54:30Z https://community.splunk.com/t5/Getting-Data-In/Cisco-IPS-app-not-working-Error-connecting-to-sensor/m-p/22833#M3560 <P>Did you ever get this fixed?</P> <P>If not, what version of the IPS app are you running? Can you ping the IPS from the Splunk server? Can you access <A href="https://Sensor_IP/cgi-bin/sdee-server">https://Sensor_IP/cgi-bin/sdee-server</A> from the Splunk server? What version of the Cisco IPS software are you running?</P> Tue, 19 Feb 2013 05:14:08 GMT https://community.splunk.com/t5/Getting-Data-In/Cisco-IPS-app-not-working-Error-connecting-to-sensor/m-p/22833#M3560 andrew_garvin 2013-02-19T05:14:08Z