Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
DevNet session for the lab for CiscoLIVE event DEVNET-2590 (Configuring eStreamer and FMC), the CreateThreatEvents script action does not appear to be working...
https://learninglabs.cisco.com/lab/firepower-estreamer-splunk/step/1