[BUG] ULS not fetching data from SIA (ETP)
opened this issue · comments
Describe the bug
ULS is receiving 0 events, although more than 5000 events are being generated on the SIA report in Akamai Control Center
To Reproduce
Steps to reproduce the behavior:
- Deploy ULS 1.6.3 in CentOS with SIA (ETP) Version: 0.4.0 and Python 3.11.2
- Performed manual installation, because the automatic one had issues with python versions and the required libraries (requirements.txt)
- Double checked the firewall has the following TCP ports open: 9090, 9091 and 9092
Expected behavior
ULS to fetch data from SIA(ETP) and send them to Qradar via TCP
Screenshots
ULS Running in debug mode Print 1
ULS Running in debug mode Print 2
CentOS port usage
Software Versions
ULS Version output
please run the following and attach the output here.
ULS was running on the customer machine, so I only got the print screen above
Hi @LuiRodriAKM ,
this is weird, if there are any logs on the Control Center, you should be able to retrieve them via ULS .
So for a first start, can we run ULS just in the "raw" mode, to see if there is anything coming into ULS.
/root/uls/bin/uls.py --input etp --feed DNS --output raw
This will fetch the logs and just send them to the local console output.
If nothing is there, we might need to dig into the CLI level for additional debugging.
The cool thing is, ULS running in '--loglevel DEBUG' will give you the full CLI command line and you can chuck in the CLI '--debug' command right after the binary
Heres an example of the CLI command
Anyways, feel free to reach out to me on WebEx so we can have a debugging session if required.
Hi @LuiRodriAKM ,
is this ticket still relevant ?
Please fee free to reach out to me at any tome so I can help you get this issue sorted.
no feedback for now - closing this