Receiving the error below. The app used to work with the same credentials but we are now receiving issues. 2022-05-24 15:49:06,518 ERROR pid=16541 tid=MainThread file=SecKit_SA_geolocation_rh_updater.py:post_update:157 | Exception generated when attempting to backup a lookup file Traceback (most recent call last): File "/opt/splunk/etc/apps/SecKit_SA_geolocation/bin/SecKit_SA_geolocation_rh_updater.py", line 122, in post_update stderr=subprocess.STDOUT, File "/opt/splunk/lib/python3.7/subprocess.py", line 411, in check_output **kwargs).stdout File "/opt/splunk/lib/python3.7/subprocess.py", line 512, in run output=stdout, stderr=stderr) subprocess.CalledProcessError: Command '['$SPLUNK_HOME/etc/apps/SecKit_SA_geolocation/bin/geoipupdate/linux_amd64/geoipupdate -v -d /opt/splunk/etc/apps/SecKit_SA_geolocation/data/ -f /tmp/GeoIPij8vhpu5.conf']' returned non-zero exit status 126. During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/opt/splunk/etc/apps/SecKit_SA_geolocation/bin/SecKit_SA_geolocation_rh_updater.py", line 124, in post_update except CalledProcessError as e: NameError: name 'CalledProcessError' is not defined   ... View more

We just stood up a new distributed deployment with 3 indexers and a CM. I was able to connect 1 indexer to the CM successfully but when I was trying to connect the other 2 indexers to it, I was getting the error "Could not contact manager. Check that the manager is up, the manager_uri=https://xxxxxxx:8089 and secret are specified correctly. I know the secret is right and it is the correct uri, firewalld is disabled, I am able to netcat to the host via 8089, indexer GUIDs are unique.  Ncat: Version 7.70 ( https://nmap.org/ncat ) Ncat: Connected to xxxxxx:8089. Ncat: 0 bytes sent, 0 bytes received in 0.02 seconds. ... View more

Does anyone know if HEC endpoint can be configured directly onto the IDM so SC4S traffic can be sent to it? It is tailor made for Splunk Cloud but I have not read anything that says that in their documentation. ... View more