CrowdStrike Add-on stops with Error


Our CrowdStrike Add-on stopped pulling logs via the API giving this error




2021-05-01 19:03:31,879 ERROR pid=31672 tid=MainThread | Get error when collecting events.
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/TA-crowdstrike-falcon-event-streams/bin/ta_crowdstrike_falcon_event_streams/aob_py2/modinput_wrapper/", line 128, in stream_events
  File "/opt/splunk/etc/apps/TA-crowdstrike-falcon-event-streams/bin/", line 71, in collect_events
    input_module.collect_events(self, ew)
  File "/opt/splunk/etc/apps/TA-crowdstrike-falcon-event-streams/bin/", line 358, in collect_events
  File "/opt/splunk/etc/apps/TA-crowdstrike-falcon-event-streams/bin/", line 234, in crowdstrike_client
    num_feeds = len(response['resources'])
TypeError: object of type 'NoneType' has no len()




I can't understand what happened or how to prevent it for happening again.

Anyone out there with same issue?


Labels (1)
Tags (2)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.