Symantec SOC View App for Splunk not collecting logs

Products

• Endpoint Security Complete

Issue/Introduction

When using Splunk Cloud and Endpoint Security with the SOC view app for Splunk, the TA wont install and gives an error stating the minimum builder version needs to be 4.1 and this was compiled using 4.0

 

 

 

Environment

Release : 14.3 RU6

Cause

The Splunk Cloud application requires a minimum builder version and currently the TA is compiled with an older version.  

Resolution

This is being resolved with the TA version 2.2.1.100

Additional Information

CRE-12696