Cisco-AMP / amp4e_splunk_events_input

BSD 2-Clause "Simplified" License
8 stars 12 forks source link

amp4e_splunk_events_input - Consumer Error that does not look like connection failure! #85

Open tanazy opened 2 years ago

tanazy commented 2 years ago

Hello, I really need your help, Splunk logs are not coming in, I double-checked everything several times, reinstalled, but nothing helps, a couple of records flew and then everything stopped the following error in the log:

2022-04-30 09:04:24,839 INFO Amp4eEvents - Connected. Starting to consume. 2022-04-30 09:04:24,839 ERROR Amp4eEvents - Consumer Error that does not look like connection failure! See the traceback below. 2022-04-30 09:04:24,840 ERROR Amp4eEvents - Traceback (most recent call last): File "/opt/splunk/etc/apps/amp4e_events_input/bin/util/stream_consumer.py", line 35, in run self.start_consuming() File "/opt/splunk/etc/apps/amp4e_events_input/bin/util/stream_consumer.py", line 62, in start_consuming self._channel.start_consuming() File "/opt/splunk/etc/apps/amp4e_events_input/bin/pika/adapters/blocking_connection.py", line 1822, in start_consuming self.connection.process_data_events0(time_limit=None) AttributeError: 'BlockingConnection' object has no attribute 'process_data_events0'

My inputs looks like this:

[amp4e_events_input://CiscoAMP] api_host = api.eu.amp.cisco.com api_id = 486c30b1fe4600002d83 disabled=0 index = main interval = 0 python.version = python3 source = CiscoAMP sourcetype = cisco:amp:event stream_name = Cisco_AMP_for_Endpoints root@splunk:/opt/splunk/bin#