All Apps and Add-ons

Install Problem

donforbes
Engager

Hi. I am having difficulty getting the PCI app to install. The app itself is installed and works fine, but I dont seem to be gettingthing in the views. Can you help?

1 Solution

Pete_Bassill
Path Finder

Afternoon.

Are you at the Splunk user conf? If you are come and find me and I will walk you through it. If not, can you be more specific on the errors you are encountering?

The vast majority of the rules are inline rules within the XML views. All but one of the XML views use the simple XML syntax so that they can be easily edited as required. The only expection to this is the amMap module, which is an implementation of the amMap application.

You will need to install the geoip app too, it is important for the location lookups and the amMap relies on it.

I am hoping to get some docs around the app produced soon. If you can provide more information, I will do my best to help.

Pete

View solution in original post

Pete_Bassill
Path Finder

Afternoon.

Are you at the Splunk user conf? If you are come and find me and I will walk you through it. If not, can you be more specific on the errors you are encountering?

The vast majority of the rules are inline rules within the XML views. All but one of the XML views use the simple XML syntax so that they can be easily edited as required. The only expection to this is the amMap module, which is an implementation of the amMap application.

You will need to install the geoip app too, it is important for the location lookups and the amMap relies on it.

I am hoping to get some docs around the app produced soon. If you can provide more information, I will do my best to help.

Pete

donforbes
Engager

Thanks, the geoip app install fixed the issue.

  • don
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...