I have successfully setup AME and tested the tenant connection and get back connector is healthy. I can also send test event from the tenant setup page and can see it in the default index. If I go to events there is not test not any of the alerts I have configured to send to AME even though I can see them in the traditional triggered alerts as they are still configured as well. Looking in _internal I do see the below error: 2025-06-06T11:24:06.612+00:00 version=3.4.0 log_level=ERROR pid=1615220 s=AbstractHECWrapper.py:send_chunk:304 uuid=***************** action=sending_event reason="[Errno 111] Connection refused" Seems to suggest there is an issue with HEC, but the tenant shows green/healthy and the test comes to the index. Any assistance would be appreaciated. Also, if I create an event from the Events page, that does show up in the app:
... View more