splunk app for tripwire enterprise ?


I want to integrate tripwire enterprise with splunk,anyone have the splunk app for tripwire enterprise ?
thank you !

Tags (2)

Path Finder

I am getting error when trying to configure the tripwire app- Encountered the following error while trying to update: In handler 'localapps': Error while posting to url=/servicesNS/nobody/te/te_data/te_endpoint/te_parameters

Tripwire Listening Port (not sure what it is, but I set it to default listening port that's open in splunk)
Enter the port that Splunk should listen for data 9997

0 Karma


Try editing the te_setup Config file directly. I too got the same error the first time I set it up but was able to get around it by editing the config file directly and restarting Splunk. My stanza looks something like this:

data_location = <Location where Data is to be written on local host>
listening_port = <TE Enterprise Console Port>
te_pass = <TE Enterprise Console Password>
te_username = <TE Enterprise Console Username>
use_forwarder_bool = 1
workflow_host = <IP Address>

I'm using a Heavy Forwarder to pull my data in which is why you see the 'use_forwarder_bool=1'.

0 Karma

Path Finder

you should post a new question with your problem and a more detailed description of your configuration, etc.

0 Karma

Path Finder

please specify which details will be helpful

0 Karma

Path Finder

Hot off the presses!

1.0 version.

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!