Hi,
We have successfully integrate Symantec WSS integration in our platform, and we start to recieve events but since 3 weeks ago where the Symantec WSS product was fully deployed in the company and we start increase the volume of data the process of ingestion has stopped.
Making a debub of the proccess we have identify that the .zip files that the Heavy Forwarder is downloading are not well formed and when Splunk monitor those files splunk is not able to finish, have someone suffer this kind of error? Any advice?
Thanks for the help.
