I got a functional siddhi file in the editor using the event simulator but i'm unable to gather data using the tcp source, is there some kind of pattern that it needs to match to be able to be recived?
I tried it in the last 2 versions of the software and as i read that in this last version of it they will change nearly all the tcp protocol i thought that i should be able to recive some kind of data, i saw de data on the tcpdump but not at the event
@source(type = 'tcp',
@map(type = 'json', fail.on.missing.attribute = "false",
@attributes(severity = "$.rawdata.panos.Severity", ipsrc = "$.source.ip", ipdst = "$.destination.ip", evento = "$.event.type", tipoAmenaza = "$.threat.type", eventCategory = "$.event.action", name = "$.organization.name", network = "$.rawdata.panos.SourceLocation")))
define stream LogStream (name string, ipsrc string, ipdst string, evento string, tipoAmenaza string, eventCategory string, severity string, network string);
it should recive the event and save it in memory for being processed
What is the URL you are using to publish the events? By default, the endpoint will be exposed at tcp://0.0.0.0:9892. Please refer to the official documentation for more details on configuring the tcp source.
Furthermore, if you observe any stacktrace in the console, please share it as well so that we can use it to guide you through to debug the issue.