topic no logs from cisco eStreamer in Getting Data In

no logs from cisco eStreamer

rashid47010 — Sat, 25 May 2019 17:07:38 GMT

although connection is successful but still I am not seeing the logs from eStreamer. whereas in DR I am getting continuously logs.

can anyone share the troubleshooting steps.

Re: no logs from cisco eStreamer

koshyk — Sat, 25 May 2019 17:55:42 GMT

your query is vague. Please put your sample estreamer config, DR system conf which is working etc.

Re: no logs from cisco eStreamer

DavidHourani — Mon, 27 May 2019 12:09:43 GMT

Hi @rashid47010,

Do you still have this problem ?
Please have a look at your _intnernal splunkd logs for any error related to your connector.

If you're looking for the documentation for the connector it can be found here :
https://www.cisco.com/c/en/us/td/docs/security/firepower/630/api/eStreamer_enCore/eStreamereNcoreSplunkOperationsGuide_354.html

Cheers,
David

Re: no logs from cisco eStreamer

rashid47010 — Tue, 28 May 2019 07:58:36 GMT

Hi David,

I follow that document as almost all the FMC's are updated to version 6.x.

for 1x.2x.6.x8, I reinstall the latest TA and I can see the logs for crosspoinding sensors but these logs does not make any sense to me as compare to logs from other FMC's.

I will send you log snapshot seperately.