Bruna,
My apologies, I thought you said the status was "processing" and not "pending data". Pending data means that there isn't any data coming from the SEP end. Please check that you are sending data from SEP to CloudSOC. Can you upload a screenshot of the status page? As well as the details page? And a picture of the text box that appears when you hover over the status bubble?
One of the most common things to forget is on page 5 of the attached, adding the firewall rule to allow SEPM to send logs to CloudSOC.
Thanks,
Olin
Original Message:
Sent: 07-27-2020 09:40 AM
From: bruna rodrigues
Subject: Integration CloudSOC X SEP
Olin,
I made this configuration on 17-07, it's been 5 days since I got the error return. Do you have any idea what I can do?
Original Message:
Sent: 07-24-2020 11:00 AM
From: Olin Basinger
Subject: Integration CloudSOC X SEP
Bruna,
So long as it is in processing, it is processing. You will receive and error or a completion once it is finished. Unfortunately there isn't an easy way to look into the exact status.
Thanks!
Olin
Original Message:
Sent: 07-24-2020 09:05 AM
From: bruna rodrigues
Subject: Integration CloudSOC X SEP
Hi guys,
Two days ago we carried out the integration of CloudSOC x SEP, configured the SEP policy and forwarded the logs to SpanVA that we already have and that houses other logs. we added a new data source in the clousoc syslog BSD protocol but the status is pending data. Is there any way to validate? what can be wrong?
Thanks;