All Apps and Add-ons

How to troubleshoot why no SCM data is ingesting in splunk for tripwire addon?

djoshi2
Engager

I am using Tripwire Enterprise Add-on for Splunk. to retrieve data using either SOAP or REST. I have tried both the methods. I see data coming in for te_FIM_csv and te_assets.csv. I see the file DTR-hist.csv created under /opt/teexports but it only has header in it. I have checked the REST API and results for policies,waivers exist on the TE console.

I also looked at tripwire_scm.py script, it's pulling from https://Ip_address/api/v1/policytestresults endpoint. That endpoint has no values in it. Is that why we aren't pulling any SCM data?

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>