SIEM API Timed out


I integrated Sophos with Qradar using the API, it had been working till today as I'm seeing a timed out error.

We didn't any change in the firewall policies.

[root@invqrdraio bin]# python3
Config endpoint=/siem/v1/events, filename='Sophos_Central.log' and format='cef'
Traceback (most recent call last):
File "/usr/lib64/python3.6/urllib/", line 1349, in do_open
File "/usr/lib64/python3.6/http/", line 1254, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/lib64/python3.6/http/", line 1300, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/usr/lib64/python3.6/http/", line 1249, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "/usr/lib64/python3.6/http/", line 1036, in _send_output
File "/usr/lib64/python3.6/http/", line 974, in send
File "/usr/lib64/python3.6/http/", line 1407, in connect
File "/usr/lib64/python3.6/http/", line 946, in connect
(,self.port), self.timeout, self.source_address)
File "/usr/lib64/python3.6/", line 724, in create_connection
raise err
File "/usr/lib64/python3.6/", line 713, in create_connection
TimeoutError: [Errno 110] Connection timed out

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "", line 413, in <module>
File "", line 410, in main
run(options, config_data, state_data)
File "", line 402, in run
endpoint, options, config_data, state
File "", line 383, in get_alerts_or_events
File "", line 121, in write_cef_format
for i in results:
File "/usr/bin/", line 319, in make_token_request
events = self.call_endpoint(token.url, default_headers, args)
File "/usr/bin/", line 260, in call_endpoint
events_response = self.request_url(events_request_url, None, default_headers)
File "/usr/bin/", line 196, in request_url
response =
File "/usr/lib64/python3.6/urllib/", line 526, in open
response = self._open(req, data)
File "/usr/lib64/python3.6/urllib/", line 544, in _open
'_open', req)
File "/usr/lib64/python3.6/urllib/", line 504, in _call_chain
result = func(*args)
File "/usr/lib64/python3.6/urllib/", line 1392, in https_open
context=self._context, check_hostname=self._check_hostname)
File "/usr/lib64/python3.6/urllib/", line 1351, in do_open
raise URLError(err)
urllib.error.URLError: <urlopen error [Errno 110] Connection timed out>
[root@invqrdraio bin]#

Parents Reply Children