Hi, while trying to add Cisco IPS module SSM-20 into Splunk I encountered following problem: No route to host.
This is what I checked:
IPS and Splunk are pingable with no firewall between them
sdee_connection.log -> there is above error
apps/Splunk_CiscoIPS/var/log/ .run -> file is empty. Erased and restarted Splunk produces new empty file again
I removed Splunk_CiscoIPS dir a installed it again, same error
Could you please suggest me, what else can I do? Is it a bug or misconfig? Thanks so much for any advice.
btw. exactly same scenario I installed before with slightly different version of IPS engine and everything worked, I don't know where is the difference, hope won't have to reinstall whole server 😞
... View more