Installation
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

Cisco amp endpoint events configuration

vestator
Engager
‎01-15-2021 02:44 AM

Hi All,

I am new here and got an issue when I tried to connect Cisco AMP.

Infos: Splunk Enterprise Version:8.0.3

Cisco AMP for Endpoints Events Input Version: 1.1.8

I have configured Cisco AMP (API host: api.eu.amp.cisco.com, key, and ID: correct), splunk has internet access, and firewall rules are correct. 

Still, when I try to make a new input I've got an error messsage: "Warning! It appears your configuration is incomplete, so you will not be able to create any inputs. Please update your configuration."   

Do you have any idea? (tried the refresh)

Thanks,

Vestator

Labels (1)
Labels
Reply
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...
Top