Join the Conversation
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: Proofpoint TAP Modular Input App: ERROR ExecPr...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Proofpoint TAP Modular Input App: ERROR ExecProcessor
Hi all,
after installing the "Proofpoint TAP Modular Input", there is the following error in: _internal splunkd proofpoint_tap_siem.py
11-30-2018 15:51:44.512 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\TA-Proofpoint-TAP\bin\proofpoint_tap_siem.py"" proofpoint_tap_siem://proofpoint_stanza_tap: stream_events/proofpoint_tap_siem://proofpoint_stanza_tap: An error occurred updating credentials. Please ensure your user account has admin_all_objects and/or list_storage_passwords capabilities. Details: 'No such entity proofpoint_tap_siem_proofpoint_stanza_tap_********%5Csplunkproxy%3A'
i use admin account with enabled "admin_all_objects and/or list_storage_passwords". Any idea?
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
no idea about the proof point TA, but its stated in the docs that Splunk CIM Add-on is required, so just a thought, did you install the CIM add on?
Might want to check out this as well: https://help.proofpoint.com/Threat_Insight_Dashboard/API_Documentation/SIEM_API
From this older post: https://answers.splunk.com/answers/578344/proofpoint-tap-modular-input-app-admin-all-objects.html it seems to be a genral issue, you could try to connect [email protected].
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi dkeck, thanks for the answer.
i think the issue could be related to this part:
"Details: 'No such entity proofpoint_tap_siem_proofpoint_stanza_tap_%5Csplunkproxy%3A'"
i can't find what should be the "entity"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Wich version of splunk and the app do you use?
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster
What's New in Splunk Enterprise Security 8.8 and Beyond
A Four-Part Event Series: State of Observability - Where AI Meets Performance
