- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- What settings are needed to run the Splunk Add-on ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Is anybody running the Splunk Add-on for Check Point OPSEC LEA on RHEL 7?
If so, are there special settings or the like that have to be done?
Thank you !
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We are.
No issues so far. I know it's not meant to be fully supported by the current version of the App (3.1.0), but it's not causing any issues.
Keep in mind it won't work with Splunk 6.4 or above.
The new release of the App is supposed to be coming out soon so RHEL 7 might be fully supported then (and also Splunk 6.4 and above).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We are.
No issues so far. I know it's not meant to be fully supported by the current version of the App (3.1.0), but it's not causing any issues.
Keep in mind it won't work with Splunk 6.4 or above.
The new release of the App is supposed to be coming out soon so RHEL 7 might be fully supported then (and also Splunk 6.4 and above).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you for this information - I installed it some minutes ago and get this error "custom:199 - cannot load specified module remote in app Splunk_TA_opseclea_linux22: /opt/splunk/lib/python2.7/site-packages/M2Crypto/__m2crypto.so: undefined symbol: SSLv2_method"
I thought that this might be related to the fact that we are using RHEL 7 but it seems that it is a different reason.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are you running Splunk 6.4?
If so, you need to downgrade to 6.3 because python in 6.4 doesn't work with OPSEC LEA.
This will be fixed in the next release of OPSEC LEA app
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes I am running 6.4.1.
Thank you for this hint !!!!! 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I had exactly the same problem 3 weeks ago so still fresh 😄
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
By the way, if this works for you don't forget to mark it as answered so that others can benefit from it
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Done - it is working 🙂
Introducing the 2024 SplunkTrust!
Introducing the 2024 Splunk MVPs!
Splunk Custom Visualizations App End of Life
