All Apps and Add-ons

Cisco AMP for Endpoints Events Input: Why is the data not being received and we are receiving this error" ...The AMQP connection was closed..."?

clogssplunk
Explorer

Hi there,

We have the Cisco AMP for Endpoints Events Input 1.1.0 installed. Data is not being received and we see the following error message appearing.

Connection error (1518453972.9, : The AMQP connection was closed: ())! Reconnecting in about 3 seconds

I have confirmed that we can access api.amp.cisco.com using CURL. What am I missing?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...