topic Tenable add-on for Splunk: How to allow full ingestion in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448749#M55201 <P>I am noticing that Splunk ingestion is spotty.<BR /> For example, out of a hundred machines that have pluginID 38153 results a few days ago (verified in the SecCenter GUI), <BR /> only three of these machines/results are found in Splunk.<BR /><BR /> Are there a limits.conf or another setting that needs to be changed to allow full ingest?</P> Tue, 25 Jun 2019 14:45:47 GMT ShaunBaker 2019-06-25T14:45:47Z Tenable add-on for Splunk: How to allow full ingestion https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448749#M55201 <P>I am noticing that Splunk ingestion is spotty.<BR /> For example, out of a hundred machines that have pluginID 38153 results a few days ago (verified in the SecCenter GUI), <BR /> only three of these machines/results are found in Splunk.<BR /><BR /> Are there a limits.conf or another setting that needs to be changed to allow full ingest?</P> Tue, 25 Jun 2019 14:45:47 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448749#M55201 ShaunBaker 2019-06-25T14:45:47Z Re: Tenable add-on for Splunk: How to allow full ingestion https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448750#M55202 <P>Everything should work out of the box. If you are seeing inconsistencies please create a support case with Tenable and we can help resolve. </P> Tue, 25 Jun 2019 18:19:29 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448750#M55202 nkeuning 2019-06-25T18:19:29Z Re: Tenable add-on for Splunk: How to allow full ingestion https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448751#M55203 <P>I have emailed Tenable to upgrade my current Tenable login to be a valid Support Portal account. In the interim, does anyone else have experience with this limit in ingestion? The Tenable add-on does not have a limits.conf, so wondering where else these limits would be found, maybe under system/default?</P> Wed, 26 Jun 2019 16:38:30 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Tenable-add-on-for-Splunk-How-to-allow-full-ingestion/m-p/448751#M55203 ShaunBaker 2019-06-26T16:38:30Z