All Apps and Add-ons

Cloudpassage Error

reed_kelly
Contributor

I'm trying to collect CloudPassage logs. I have generated the Key ID and Secret Key. I then entered these values into a new CloudPassage Halo data input with the other fields:

Endpoint URL
CloudPassage Halo Client Key
Enter Password (CloudPassage Halo Secret key)
Time between polling cycles
HTTP Proxy

I keep getting "Failed to authenticate to CP Halo Portal". If I use curl to connect manually, however, I do get an access token back.

0 Karma
1 Solution

dgindin_cp
Engager

Reed,

I'm glad I was able to help you today. The CloudPassage App for Splunk Enterprise requires Python 2.7.11 with OpenSSL 1.0.2g (or newer) to connect securely to the Halo platform. Splunk Enterprise 6.4.x and 6.5.0 are bundled with these required software versions. If you are running an older version of Splunk Enterprise, please contact Splunk support for instructions on how to upgrade Python.

Thank you!

Daniel Gindin
Sr. Security Engineer, Customer Success | CloudPassage
215-534-5992
dgindin@cloudpassage.com
www.cloudpassage.com

View solution in original post

dgindin_cp
Engager

Reed,

I'm glad I was able to help you today. The CloudPassage App for Splunk Enterprise requires Python 2.7.11 with OpenSSL 1.0.2g (or newer) to connect securely to the Halo platform. Splunk Enterprise 6.4.x and 6.5.0 are bundled with these required software versions. If you are running an older version of Splunk Enterprise, please contact Splunk support for instructions on how to upgrade Python.

Thank you!

Daniel Gindin
Sr. Security Engineer, Customer Success | CloudPassage
215-534-5992
dgindin@cloudpassage.com
www.cloudpassage.com

dgindin_cp
Engager

Reed,

I am available to assist you with configuring Splunk to retrieve CloudPassage Halo logs. Please feel free to call or email me at your earliest convenience.

Thank you.

Daniel Gindin
Sr. Security Engineer, Customer Success | CloudPassage
215-534-5992
dgindin@cloudpassage.com
www.cloudpassage.com

reed_kelly
Contributor

Thanks Daniel,
We can post any generic resolutions when we are finished.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...