Getting CyberChef working in Splunk

[fatsug]

App installs, the readme is there and the in browser CyberChef.html works just fine.

However, when I try to execute SPL using cyberchef like the example from the documentation:

| makeresults count=3 
 | streamstats count
 | eval data=random()/random() 
 | cyberchef infield='data' outfield='convertedData' operation="ToBase64" 
 | table data convertedData

I get an error output from Splunk

Error in 'cyberchef' command: CyberChef chef.bake is not a function

I'm trying to get this running on a single test instance in a VM, all file persmissions looks right..

Am I missing something, or is this a symptom of me trying to test the app using the "free" version of Splunk (I seem to remember enterprise being needed)?

Any suggestions and/or feedback appreciated!

[fatsug · Accepted solution]

Yup, had to be enterprise. Case closed 🙂

[TriviaPostal234]

Hey @fatsug can you please, please be a little bit more concrete?

Because I am having exact the same issue but it IS on Splunk Enterprise.

So, what did you do to fix it?

Thanks in advance

[fatsug]

I installed CyberChef on Splunk Enterprise, that's it.

I was trying to test out the application on a local machine and an install of Splunk with a "free" license. This did not work at all, so I rolled out the app in our Enterprise test environment and there it did work.

In other words, I did not really do anything to "fix" it, it just worked once there was a valid enterprice license.