Splunk Enterprise Security

Palo Alto Networks Add-on 6.0.2: Why can't I download threat intelligence from AutoFocus' MineMeld in Splunk Enterprise Security?

stanleyleung
New Member

Palo Alto Networks Add-on 6.0.2 - fail to download threat intelligence from AutoFocus' MineMeld in Splunk Enterprise Security

I installed Palo Alto Networks Add-on 6.0.2 and configured it to download threat intelligence from MineMeld. Some download tasks were added to Enterprise Security Intelligence Download, however, the list is empty and i got the below error message for 'IP' list(same error for script of 'domain' and 'url').

Health Check: msg="A script exited abnormally with exit status: 1" input="./opt/splunk/etc/apps/Splunk_TA_paloalto/bin/minemeld_feed.py" stanza="minemeld_feed://AutoFocus_Threat_Intelligence_IP"
0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...