I was trying to install the Anomali ThreatStream Community App but get the following errors:
"snapshot download failed. reason=optic_client> Failed to retrieve snapshot url: cannot find the snapshot"
how do I fix it?
(I'm using the ThreatStream OnPrem product.)
The Anomali ThreatStream App for Splunk does not support direct connections to ThreatStream On Prem appliances. On Prem appliances lack the capability to create IOC snapshots and require an Anomali Integrator instance to act as a go between for integrations. Integrator will download the relevant IOCs and ThreatModels to create snapshots for other integrations.
If you need any help setting up Integrator, you can find the binaries/admin guide at https://ui.threatstream.com > Downloads. Alternatively, you can reach out to your Anomali support team if you have any additional questions
The Anomali ThreatStream App for Splunk does not support direct connections to ThreatStream On Prem appliances. On Prem appliances lack the capability to create IOC snapshots and require an Anomali Integrator instance to act as a go between for integrations. Integrator will download the relevant IOCs and ThreatModels to create snapshots for other integrations.
If you need any help setting up Integrator, you can find the binaries/admin guide at https://ui.threatstream.com > Downloads. Alternatively, you can reach out to your Anomali support team if you have any additional questions