topic Re: Splunk Eventgen in Training + Certification Discussions

Splunk Eventgen

hnguyen41 — Tue, 29 Sep 2020 21:39:28 GMT

I am new to Splunk. I tried to install SA_Eventgen app. When I went to apps directory (/opt/slunk/etc/apps/SA_Eventgen/local), I get permission denied. Can anyone explained it to me please? I could not find the tutorial video for the eventgen app either, if someone know where can I find a tutorial session?

Thank a lot.

Re: Splunk Eventgen

ehollima — Thu, 18 Oct 2018 23:40:40 GMT

Here are 2 resources to help you:
I use this one, it is straight forward and works with any TA that has eventgen files:
https://github.com/coccyx/eventgen

Recent find I am investigating:
https://github.com/splunk/eventgen

Re: Splunk Eventgen

ehollima — Thu, 18 Oct 2018 23:43:08 GMT

Appendix B: Eventgen troubleshooting tips:
http://dev.splunk.com/view/dev-guide/SP-CAAAE3E

Re: Splunk Eventgen

hnguyen41 — Thu, 18 Oct 2018 23:44:49 GMT

Do you know why I am not allowed to access the local directory for that app?