Splunk Enterprise

About configuring cve lookup app

franciscof
Explorer

Hi guys, I'm getting this error while trying to configure an scripted input for the app cve_lookup.

franciscof_0-1599060942462.png

 

What do you think can be the cause of it?

Labels (1)
0 Karma

franciscof
Explorer

When checking the internal logs, this is what I've got:

franciscof_0-1599071573840.png

This script collects (once you configured an input) data from CVEs (common vulnerabilities exposures) on a NVD (national vulnerabilty database) and then you can visualize the data through a couple of dashboards. I was able to make it work in the past but now we migrated Splunk to the latest version and suddenly it won't work anymore.

0 Karma

iamkilarunaresh
Explorer

@franciscof  Can you please check the internal error logs, To find the more information.. Please explain what your script does, and what are you trying to achieve? 

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...