topic Re: Splunk Fish Bucket indicating Virus in Deployment Architecture

Splunk Fish Bucket indicating Virus

indra_wijaya — Thu, 13 Sep 2012 04:26:16 GMT

Hi Guys,

I have a problem related to Splunk Fishbucket..
When I run my full scan on Splunk server, it found a Trojan on the fishbucket folder.
C:\Program Files\Splunk\var\lib\splunk\fishbucket\4069420869.tmp

Any idea why this is indicated as a Virus?

Re: Splunk Fish Bucket indicating Virus

adamw — Thu, 13 Sep 2012 04:49:39 GMT

It's likely there used to be a virus with a similar file name, ending in tmp. Some AV programs trigger on any tmp file not actually in the Windows tmp/temp folder, but this is likely a false positive.

Re: Splunk Fish Bucket indicating Virus

indra_wijaya — Fri, 14 Sep 2012 09:35:32 GMT

Hi adamw,

Thank you for your reply.. So this is just a false positive alert.. I see then.. Thank you for your response..