All Apps and Add-ons
Highlighted

How to troubleshoot why no SCM data is ingesting in splunk for tripwire addon?

Engager

I am using Tripwire Enterprise Add-on for Splunk. to retrieve data using either SOAP or REST. I have tried both the methods. I see data coming in for teFIMcsv and te_assets.csv. I see the file DTR-hist.csv created under /opt/teexports but it only has header in it. I have checked the REST API and results for policies,waivers exist on the TE console.

I also looked at tripwirescm.py script, it's pulling from https://Ipaddress/api/v1/policytestresults endpoint. That endpoint has no values in it. Is that why we aren't pulling any SCM data?

0 Karma