<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Strata HTTPS Log Forwarding in Strata Logging Service Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/strata-logging-service/strata-https-log-forwarding/m-p/1231419#M290</link>
    <description>&lt;P&gt;Hello World!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We've just hit a problem with HTTPS Log Forwarding out of &lt;LI-PRODUCT title="Strata Logging Service" id="Strata_Logging_Service"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;to Microsoft Sentinel.&amp;nbsp; We have an existing forwarder working, but want to replace it with one forwarding to a new workspace, so we have set up a new listener, collected the ID and Secret, but when we configure in Strata we get "&lt;SPAN data-teams="true"&gt;An error occured while testing connection"&amp;nbsp; This happens BEFORE it tries to connect to the listener - we see no connection attempt.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We have tested with the details for the working forwarder, and get the same error, although it is still forwarding.&amp;nbsp; If we try and update the existing forwarder we get "&lt;SPAN data-teams="true"&gt;server communication error Read timed out&lt;/SPAN&gt;" - that was working last week!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;While the forwarding still works, my feeling is that something has broken on the configuration web app.&amp;nbsp; I don't think we are doing anything wrong.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Has anyone else seen this, or knows of a fix?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Simon&lt;/P&gt;</description>
    <pubDate>Tue, 10 Jun 2025 12:43:13 GMT</pubDate>
    <dc:creator>S.Bradley</dc:creator>
    <dc:date>2025-06-10T12:43:13Z</dc:date>
    <item>
      <title>Strata HTTPS Log Forwarding</title>
      <link>https://live.paloaltonetworks.com/t5/strata-logging-service/strata-https-log-forwarding/m-p/1231419#M290</link>
      <description>&lt;P&gt;Hello World!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We've just hit a problem with HTTPS Log Forwarding out of &lt;LI-PRODUCT title="Strata Logging Service" id="Strata_Logging_Service"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;to Microsoft Sentinel.&amp;nbsp; We have an existing forwarder working, but want to replace it with one forwarding to a new workspace, so we have set up a new listener, collected the ID and Secret, but when we configure in Strata we get "&lt;SPAN data-teams="true"&gt;An error occured while testing connection"&amp;nbsp; This happens BEFORE it tries to connect to the listener - we see no connection attempt.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We have tested with the details for the working forwarder, and get the same error, although it is still forwarding.&amp;nbsp; If we try and update the existing forwarder we get "&lt;SPAN data-teams="true"&gt;server communication error Read timed out&lt;/SPAN&gt;" - that was working last week!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;While the forwarding still works, my feeling is that something has broken on the configuration web app.&amp;nbsp; I don't think we are doing anything wrong.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Has anyone else seen this, or knows of a fix?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Simon&lt;/P&gt;</description>
      <pubDate>Tue, 10 Jun 2025 12:43:13 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/strata-logging-service/strata-https-log-forwarding/m-p/1231419#M290</guid>
      <dc:creator>S.Bradley</dc:creator>
      <dc:date>2025-06-10T12:43:13Z</dc:date>
    </item>
    <item>
      <title>Re: Strata HTTPS Log Forwarding</title>
      <link>https://live.paloaltonetworks.com/t5/strata-logging-service/strata-https-log-forwarding/m-p/1232716#M291</link>
      <description>&lt;P&gt;Hi Simon,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I was having the same issue, and I ended up needing to fix the web app code.&amp;nbsp;Try cloning my repository and see if that fixes the issue:&lt;/P&gt;
&lt;P&gt;&lt;A href="https://github.com/ElishaR-D61/cdl-decompress-proxy-sentinel-ingest" target="_blank"&gt;GitHub - ElishaR-D61/cdl-decompress-proxy-sentinel-ingest: Proxy application for ingesting into Microsoft Sentinel from Strata Logging Service&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you run into any further error codes while configuring the forwarding profile, have a look at the troubleshooting page I made:&lt;/P&gt;
&lt;P&gt;&lt;A href="https://github.com/ElishaR-D61/cdl-decompress-proxy-sentinel-ingest/blob/master/TROUBLESHOOTING.md" target="_blank"&gt;cdl-decompress-proxy-sentinel-ingest/TROUBLESHOOTING.md at master · ElishaR-D61/cdl-decompress-proxy-sentinel-ingest · GitHub&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Hope that helps!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Elisha&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 26 Jun 2025 23:39:07 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/strata-logging-service/strata-https-log-forwarding/m-p/1232716#M291</guid>
      <dc:creator>E.Rackley</dc:creator>
      <dc:date>2025-06-26T23:39:07Z</dc:date>
    </item>
  </channel>
</rss>

