TA Proofpoint TAP v1.3.150 WebUI not displaying correctly

[Glasses2]

Hi 

Does anyone know how to fix the Proofpoint TAP WebUI for inputs and configuration?

When I launched a clean install of the app on a clean install of 9.0.4.1, the inputs and configuration pages are blank. However, when I edit the url to /search it loads properly.

Anyone know how to fix this?

Thank you

[ww9rivers]

I am having the exact same issue with version 1.4.1 (also with 1.4.0).

• Page shows: /en-US/app/TA-Proofpoint-TAP/search
• Page blank: /en-US/app/TA-Proofpoint-TAP/inputs
• Page blank: /en-US/app/TA-Proofpoint-TAP/configuration

Has there been a solution to the problem? I have entered a Splunk support case but they are not of any help as usual. I've also sent email to Proofpoint but no reply yet.

Thanks for any fix/thoughts/ideas!

[ww9rivers]

As it turns out, this TA is built different from the TA-pps_ondemand in that the TA-Proofpoint-TAP does NOT have its own UI. I guess I was misled by the TA redirecting me to the `/en-US/app/TA-Proofpoint-TAP/inputs` URL when I try to open the TA.

To actually configure the input, one would have to go to Settings > Data inputs. Then page though the different input types to find "Proofpoint TAP SIEM Modular Input" and click + Add new to add a new input.

I guess there is no configuring account for this type of input that can be shared between multiple instances.

I guess version 1.3.150 is no different. Hope that helps.

[PickleRick]

If you mean https://splunkbase.splunk.com/app/3681 it's not a Splunk-supported app so contacting Splunk about it is pointless. The contact tab in Splunkbase lists splunk-integrations@proofpoint.com as the email for support. You can also try to raise a ticket in Proofpoint for the addon but I suppose that even if they don't reject it, it will get a lowest possible priority since it's not directly related to the service itself.