cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1937
Views
10
Helpful
1
Replies

event stream emails...

Hey guys, 

 

I got a stack of emails that look like this: 

 

Cisco AMP for Endpoints Announcement - Required Updates for Event Streams
During a recent update to address latency and performance issues with Event Streaming, the credentials relating to the queues for the following streams had been reset: ["event_stream_3935"]. In order to continue to use the Event Streaming function, we recommend deleting the old stream and replacing it with a new one. Though the original streams are still visible on the Console, a consequence of this update is that they are no longer equipped with the correct credentials. We do apologize for any inconvenience this may have caused and appreciate your patience as we continue to take steps to improve our product functionality.

 

 

But as far as I can tell, I don't have any streams set up... 

A call to https://api.amp.cisco.com/v1/event_streams returns 0 streams...

What's going on??

 

Ken

 

1 Reply 1

jorgenav
Cisco Employee
Cisco Employee

Hi Ken,

 

These emails are from an update in the Event Streams that affected some of the currently configured Streams.

Businesses affected by this are required to recreate their streams to avoid issues.

 

If you don't have events streams configured, there is no action needed on your end. The emails were initially sent to potentially affected businesses but not all were affected.

 

If you want to doublecheck if there are event streams that need to be recreated you can do the following API call:

curl -X GET "https://$3rd_Party_API_Client_ID$:$API_key$@api.amp.cisco.com/v1/event_streams"
• Replace $3rd_Party_API_Client_ID$ and $API_key$ with your API keys created
o I.E: curl -X GET "https://XXXX-XXXX-XXXX-XXX-XXXX:XXXXXXXX-XXXXXXX@api.amp.cisco.com/v1/event_streams"

From windows you’ll need the curl utility to perform the API call from CMD, you can download the Windows 64 bit package from the following url: http://curl.haxx.se/download.html

 

If you don’t have event streams the notifications are being cancelled so they should stop shortly

 

Regards,

Jorge Navarrete

Technical Consulting Engineer