For SQS S3 and Cloudtrail just clone your input and create multiple inputs. Just watch resources (CPU, Load Average) on the host where the inputs are defined. If you modify any python code then the TA will no longer be supported and will break with upgrades.
... View more
Hi, I have configured eStreamer according to cisco official guide, but there are no message to splunk and error message below Can someone help resolve the issue, Thanks https://www.cisco.com/c/en/us/td/docs/security/firepower/670/api/eStreamer_enCore/eStreamereNcoreSplunkOperationsGuide_409.html ./splencore.sh test show message below
... View more