empty messages

[shikiko]

trying to use this on rhel9.5 and the for msg in message portion in the input_module_opencti_indicators.py is outputting empty data, tried across different streams and is till not working

[romain-filigran]

Hi @shikiko : Can you share an example of the stream configuration ? Can you confirm that some events are exposed by the stream ?

[CTIBurn0ut]

Not sure if its possible, but if you could provide logs from the Add-on would also help.
index=_internal sourcetype="taopenctiaddon:log"

** Also please make sure that you set the logging to debug in the Splunk Add-on

[CTIBurn0ut]

Noted this error is our testing environment. Issue related to a change in variable names. Changes have been committed.