no logs from cisco eStreamer

[rashid47010]

although connection is successful but still I am not seeing the logs from eStreamer. whereas in DR I am getting continuously logs.

can anyone share the troubleshooting steps.

[DavidHourani]

Hi @rashid47010,

Do you still have this problem ?
Please have a look at your _intnernal splunkd logs for any error related to your connector.

If you're looking for the documentation for the connector it can be found here :
https://www.cisco.com/c/en/us/td/docs/security/firepower/630/api/eStreamer_enCore/eStreamereNcoreSpl...

Cheers,
David

[rashid47010]

Hi David,

I follow that document as almost all the FMC's are updated to version 6.x.

for 1x.2x.6.x8, I reinstall the latest TA and I can see the logs for crosspoinding sensors but these logs does not make any sense to me as compare to logs from other FMC's.

I will send you log snapshot seperately.

[koshyk]

your query is vague. Please put your sample estreamer config, DR system conf which is working etc.