All Apps and Add-ons

Proofpoint TAP Modular Input App: Autologin succeeded, but there was an auth error on next request. Something is very wr

ferdydek
Path Finder

I'm facing issue setting up modular input for Proofpoint TAP.

splunkd.log:

 

INFO ModularInputs - Autologin succeeded, but there was an auth error on next request. Something is very wrong.
WARN ModularInputs - Argument validation for scheme=proofpoint_tap_siem failed: Autologin succeeded, but there was an auth error on next request. Something is very wrong.

 


API principle and server work well when tested with curl.


Tested on 7.3.0 and 8.0.6 splunk heavy forwarder. Splunk is behind squid proxy with not SSL manipulation. Other TA's on this box don't have issues accessing data on the internet.

@eckolp2003 any hints where to look ?

Labels (1)
0 Karma

subvocal
Engager

Hi @ferdydek - It's been a while since you posted. I'm a Product Manager at Proofpoint and can help you get this solved. Are you still seeing this issue when using the Proofpoint TAP modular input?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...