Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Telemetry Streaming][Generic_HTTP] Data not received in the Consumer via Generic_HTTP type #237

Open
harsh-shah2-crest opened this issue Dec 7, 2022 · 0 comments
Labels
bug Something isn't working untriaged Issue needs to be reviewed for validity

Comments

@harsh-shah2-crest
Copy link

Environment

  • Telemetry Streaming Version: f5-telemetry-1.31.0-2.noarch
  • BIG-IP Version: BIG-IP 15.1.0.5 Build 0.0.8 Point Release 5

Summary

Unable to connect and send data to Falcon LogScale platform with Telemetry Streaming Generic_HTTP type.

Steps To Reproduce

Steps to reproduce the behavior:

  1. Submit the following declaration:
{
    "class": "Telemetry",
    "controls": {
        "class": "Controls",
        "logLevel": "debug",
        "debug": true
    },
    "My_System": {
        "class": "Telemetry_System",
        "trace": true,
        "systemPoller": {
            "interval": 60
        }
    },
    "My_Listener": {
        "class": "Telemetry_Listener",
        "port": 6514
    },
    "My_Consumer": {
        "class": "Telemetry_Consumer",
        "type": "Generic_HTTP",
        "host": "cloud.community.humio.com",
        "trace": true,
        "path": "/api/v1/ingest/hec",
        "method": "POST",
        "outputMode": "processed",
        "headers": [
            {
                "name": "content-type",
                "value": "application/json"
            },
            {
                "name": "Authorization",
                "value": "Bearer <ingest-token-here>"
            }
        ],
        "protocol": "https"
    }
}
  1. Observe the following error response:
    error observed in /var/log/restnoded/restnoded.log
    image

We have set up Generic_HTTP consumer in Telemetry Streaming to forward events to the cloud platform but the events are not forwarded.

Does Generic_HTTP consumer support forward Telemetry streaming data to the cloud SIEM platforms?

Is there any other configuration we need to follow to achieve this?

Also, does it supports only http protocol or both?

@harsh-shah2-crest harsh-shah2-crest added bug Something isn't working untriaged Issue needs to be reviewed for validity labels Dec 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working untriaged Issue needs to be reviewed for validity
Projects
None yet
Development

No branches or pull requests

1 participant