After moving to Splunk 6.5 from Splunk 6.3.3, the following threat intelligence sources fail to download. **Splunk ES was upgraded to 4.5**
I checked the server has internet access. I also excluded corresponding URLs from the proxy.
msg="A threat intelligence download has failed" stanza="hailataxii_malware" status="Retrieved document from TAXII feed
msg="A threat intelligence download has failed" stanza="mozilla_public_suffix_list" status="threat list download failed after multiple retries
↧