Splunk Enterprise Security

After Upgrade ES to 6.1.0 Getting error as Health Check: Intelligence download of "icann_top_level_domain_list" has failed on host XXX in SA-ThreatIntelligence

schandrasekar
Loves-to-Learn

Only for the stanza icann_top_level_domain_list , we are getting error "threat list download failed after multiple retries" Learn more.list" retries_remaining="-1" status="threat list download failed after multiple retries" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
Here is the sample log
2020-04-16 23:30:15,664+0000 INFO pid=17793 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="2" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-16 23:31:45,919+0000 INFO pid=17793 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="1" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-16 23:33:16,208+0000 INFO pid=17793 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="0" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-16 23:34:16,256+0000 INFO pid=17793 tid=MainThread file=threatlist.py:download_csv:417 | stanza="icann_top_level_domain_list" retries_remaining="-1" status="threat list download failed after multiple retries" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-17 02:51:43,154+0000 INFO pid=17044 tid=MainThread file=threatlist.py:run:459 | status="continuing" msg="Processing stanza" name="threatlist://icann_top_level_domain_list"
2020-04-17 02:51:43,154+0000 INFO pid=17044 tid=MainThread file=threatlist.py:run:473 | status="retrieved_checkpoint_data" stanza="icann_top_level_domain_list" last_run="1587079694.838963"
2020-04-17 02:51:43,154+0000 INFO pid=17044 tid=MainThread file=threatlist.py:download_csv:364 | status="CSV download starting" stanza="icann_top_level_domain_list"
2020-04-17 02:52:13,381+0000 INFO pid=17044 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="3" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-17 02:53:43,697+0000 INFO pid=17044 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="2" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-17 02:55:13,916+0000 INFO pid=17044 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="1" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-17 02:56:44,174+0000 INFO pid=17044 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="0" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-04-17 02:57:44,234+0000 INFO pid=17044 tid=MainThread file=threatlist.py:download_csv:417 | stanza="icann_top_level_domain_list" retries_remaining="-1" status="threat list download failed after multiple retries" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-05-02 02:51:43,206+0000 INFO pid=23520 tid=MainThread file=threatlist.py:run:459 | status="continuing" msg="Processing stanza" name="threatlist://icann_top_level_domain_list"
2020-05-02 02:51:43,207+0000 INFO pid=23520 tid=MainThread file=threatlist.py:run:473 | status="retrieved_checkpoint_data" stanza="icann_top_level_domain_list" last_run="1587091903.1543882"
2020-05-02 02:51:43,207+0000 INFO pid=23520 tid=MainThread file=threatlist.py:download_csv:364 | status="CSV download starting" stanza="icann_top_level_domain_list"
2020-05-02 02:52:13,858+0000 INFO pid=23520 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="3" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-05-02 02:53:44,127+0000 INFO pid=23520 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="2" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-05-02 02:55:14,407+0000 INFO pid=23520 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="1" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-05-02 02:56:44,681+0000 INFO pid=23520 tid=MainThread file=threatlist.py:download_csv:390 | stanza="icann_top_level_domain_list" retries_remaining="0" status="retrying download" retry_interval="60" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"
2020-05-02 02:57:44,703+0000 INFO pid=23520 tid=MainThread file=threatlist.py:download_csv:417 | stanza="icann_top_level_domain_list" retries_remaining="-1" status="threat list download failed after multiple retries" url="https://data.iana.org/TLD/tlds-alpha-by-domain.txt"

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!