We are currently attempting to use the Splunk for Cisco IPS App (http://apps.splunk.com/app/528/) to pull data from our IPS devices into Splunk. However, we have run into the following problem: while the script successfully authenticates against the IPS device, it does not seem to pull any data from the /cgi-bin/sdee-server endpoint. When I hit this endpoint in my browser (using the same credentials as the script is using), I see the log data, so I know it exists and is accessible by this account. Nor are any exceptions raised in the logs; it appears the script is simply returning no data from the web request.
Any thoughts on what might be causing this problem?