All Apps and Add-ons

Discussions

Thread Info

Module missing in Cisco AMP events input

I'm running Cisco AMP events input on Splunk 8 on python 2.7.17 and received the following error after configuring th...

by Explorer in

Limiting ingested fields in Azure Event Hubs

I"d like to send audit data through an event hub. However, i want my heavy fwd'r to not send all fields to splunk a...

by Engager in

How can I benchmark my Machine Learning forecasting procedure?

Hi I am forecasting the number of logins. My dataset has the number of logins by the hour (1 month). I use a) and...

by Communicator in

[Help] - How to remove duplicated events in this specific scenario

Hi Team, I have audited below user behavior data on web UI. For ACT=OPEN_PAGE, which means user open a web UI pa...

by Explorer in

No Errors and no logs with Microsoft Office 365 Reporting Add-on for Splunk

Hello, i have installed the Reporting Add-on and fixed the Error 500. The Add-On is now connecting to Mircosoft and...

by New Member in

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Below is one improvement (which saves a significant amount of money/resources) and one bug fix (which improves ingest...

by Path Finder in

Dell Network Switch Addon

I'm getting logs from my Dell switches, but I can't find a suitable addon. Is there a current Dell or other addon tha...

by Path Finder in

AS400 Forwarder App

I require to send OS and Authorisation logs from a AS400 server to Splunk, unfortunately no universal forwarder exist...

by New Member in

TA-MS_Defender / Microsoft Defender ATP Add-on for Splunk: Configuration Page / Accounts tab "hangs" endlessly

Installed the TA on a sandbox standalone machine with splunk 7.3.3- If i try to configure stuff in the "Configuratio...

by Observer in

How can I validate Azure Storage account connected with the Splunk Add-on for Microsoft Cloud Services.

Hi, We have a requirement to monitor Azure logs from Splunk. For that we need to complete the following steps...

by Explorer in

Bluecoat ProxySG logs parsing properly

Hi experts Bluecoat proxysg logs are not parsing properly, we are sending logs from Bluecoat proxy to syslog-ng se...

by Loves-to-Learn in

Network Diagram Viz is supported by Splunk Cloud ?

Hello, I wanted to implement Network diagram Viz for Splunk Cloud. But is it supported by Splunk Cloud ? Thank yo...

by Explorer in

Microsoft Azure Add-on for Splunk version config problem

I installed version 3.0.1 of the Microsoft Azure Add-on for Splunk on one of our Heavy Forwarders. I was able to conf...

by Path Finder in

SPLUNK DB Connect (3.3.1) Setup: JRE Installation Path(JAVA_HOME)

Hi, Having a hard time setting up the JRE Installation Path(JAVA_HOME). Please note that to the best of my knowledg...

by Engager in

Microsoft Azure Add-on Error setting/pulling Event Hub

Hello, I'm trying to integrate with Event Hub I've entered my Connection String: Endpoint=sb://<event-hub>.s...

by Communicator in

Smart Outlier Detection - Split by Fields - Error in Fit command

Hi , I get following error message when trying to select split by field option, i choose less than 5 features but ...

by Engager in

Playbook is unable to get the artifact value and ID

When I run the playbook in debugger mode by passing the event ID to test it, for the first time the playbook is worki...

by Loves-to-Learn in

How to enable ServiceNOW hyperlink in Splunk to navigate user directly to SNOW incident?

We currently have Splunk Enterprise and ServiceNOW integrated via the Splunk Add-on for ServiceNOW. We have the abili...

by Path Finder in

Unable to initialize modular input "mscs_storage_table" defined in the app "Splunk_TA_microsoft-cloudservices"

Hello,I have a problem with Splunk Add-on for Microsoft Cloud Services. It is installed on Heavy Forwarder in a distr...

by Explorer in

Configuration Apps Pavo Aplura

Hello, I would like to use the apps from aplura to monitor my network activities, such as authentication, network ...

by Explorer in

All Apps and Add-ons

Discussions

Module missing in Cisco AMP events input

Limiting ingested fields in Azure Event Hubs

How can I benchmark my Machine Learning forecasting procedure?

[Help] - How to remove duplicated events in this specific scenario

No Errors and no logs with Microsoft Office 365 Reporting Add-on for Splunk

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Dell Network Switch Addon

AS400 Forwarder App

TA-MS_Defender / Microsoft Defender ATP Add-on for Splunk: Configuration Page / Accounts tab "hangs" endlessly

How can I validate Azure Storage account connected with the Splunk Add-on for Microsoft Cloud Services.

Bluecoat ProxySG logs parsing properly

Network Diagram Viz is supported by Splunk Cloud ?

Microsoft Azure Add-on for Splunk version config problem

SPLUNK DB Connect (3.3.1) Setup: JRE Installation Path(JAVA_HOME)

Microsoft Azure Add-on Error setting/pulling Event Hub

Smart Outlier Detection - Split by Fields - Error in Fit command

Playbook is unable to get the artifact value and ID

How to enable ServiceNOW hyperlink in Splunk to navigate user directly to SNOW incident?

Unable to initialize modular input "mscs_storage_table" defined in the app "Splunk_TA_microsoft-cloudservices"

Configuration Apps Pavo Aplura

Module missing in Cisco AMP events input

No Errors and no logs with Microsoft Office 365 R...

AS400 Forwarder App

TA-MS_Defender / Microsoft Defender ATP Add-on for...

How can I validate Azure Storage account connected...