Splunk Enterprise Security

Palo Alto Networks Add-on 6.0.2: Why can't I download threat intelligence from AutoFocus' MineMeld in Splunk Enterprise Security?

stanleyleung
New Member

Palo Alto Networks Add-on 6.0.2 - fail to download threat intelligence from AutoFocus' MineMeld in Splunk Enterprise Security

I installed Palo Alto Networks Add-on 6.0.2 and configured it to download threat intelligence from MineMeld. Some download tasks were added to Enterprise Security Intelligence Download, however, the list is empty and i got the below error message for 'IP' list(same error for script of 'domain' and 'url').

Health Check: msg="A script exited abnormally with exit status: 1" input="./opt/splunk/etc/apps/Splunk_TA_paloalto/bin/minemeld_feed.py" stanza="minemeld_feed://AutoFocus_Threat_Intelligence_IP"
0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...