All Apps and Add-ons

Cisco AMP for Endpoints Events - JSON Vulnerable Application Detected Incomplete


Hi Samson,

The current version 2.0.1of Cisco AMP for Endpoints Events seems to cut off the "Vulnerable Application Detected" JSON. It appears if there is a large amount of CVE info, it tends to leave the event incomplete and does not format the JSON correctly. I don't know if it is the behavior of the response or not. When running the python manually, it appears to do the same thing from A limitation of the size of the JSON response.  Would this be correct?





Labels (2)
Tags (1)
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>