All Apps and Add-ons

Start a Conversation

Discussions

Start a Conversation

Thread Info

Routing data to separate index using (?!...)

Hello. Trying to resolve an issue with routing log events. The goal is to route log events with an "Api" keyword t...

by Loves-to-Learn in

Microsoft Azure Add-on - What attributes will be collected for users (azure:aad:user)?

I would like to setup an identity lookup for Azure AD user accounts in Splunk ES. It looks like the Microsoft Azure ...

by Observer in

Splunk Dashboards Beta App - System Requirements

We are currently running a single-instance of Splunk (1 search, 1 indexer) on a c5.4xlarge AWS EC2 instance in a POC ...

by Path Finder in

DLTK search error for sending to container

Hi All, I am trying to test DLTK. As I run a search for sending to container, it shows errors: unable to read JSO...

by Explorer in

How to identify that my dashboard is using Advanced XML or Simple XML?

The Advanced XML is not supported with the Splunk upgraded version of 8.X - So how can I identify that which XML is...

by Path Finder in

how to open a lookup editor app dashboard?

hi, I have created a lookup and have opened the lookup using search option...i saved the results of this search int...

by New Member in

Query for split or replace command to just fetch incident number from subject

My query fetches ( recipient, time, subject) in table. However, my requirement is to split incident number ( INC0002...

by Explorer in

Microsoft Office 365 Reporting Add-on for Splunk is Unstable

We are using version 1.1 of Microsoft Office 365 Reporting Add-on for Splunk, but the app stops pulling the data very...

by Path Finder in

Will the sourcetype be created automatically

When we install an App (any app) in Splunk, will the sourcetype be created automatically?

by Explorer in

Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error

Installed and configured Microsoft Office 365 Reporting Add-on for Splunk but it doesn't seem to be pulling any data....

by Path Finder in

Lookup table suddenly showing no data rows

One of my new colleagues was working on a lookup in a splunk app and seems to have somehow made a lookup table unavai...

by New Member in

3D Graph Network Topology Unknown search command fit

Hello, I am new to splunk so I will try to be as clear as possible. I wanted to test the visualization of networkx ...

by New Member in

How can SC4S be deployed to provide high availability?

How can Splunk Connect for Syslog be deployed in a way that reduces/avoids lost events?

by Splunk Employee in

Module missing in Cisco AMP events input

I'm running Cisco AMP events input on Splunk 8 on python 2.7.17 and received the following error after configuring th...

by Explorer in

Limiting ingested fields in Azure Event Hubs

I"d like to send audit data through an event hub. However, i want my heavy fwd'r to not send all fields to splunk a...

by Engager in

How can I benchmark my Machine Learning forecasting procedure?

Hi I am forecasting the number of logins. My dataset has the number of logins by the hour (1 month). I use a) and...

by Communicator in

[Help] - How to remove duplicated events in this specific scenario

Hi Team, I have audited below user behavior data on web UI. For ACT=OPEN_PAGE, which means user open a web UI pa...

by Explorer in

No Errors and no logs with Microsoft Office 365 Reporting Add-on for Splunk

Hello, i have installed the Reporting Add-on and fixed the Error 500. The Add-On is now connecting to Mircosoft and...

by Observer in

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Below is one improvement (which saves a significant amount of money/resources) and one bug fix (which improves ingest...

by Path Finder in

Dell Network Switch Addon

I'm getting logs from my Dell switches, but I can't find a suitable addon. Is there a current Dell or other addon tha...

by Path Finder in

All Apps and Add-ons

Discussions

Routing data to separate index using (?!...)

Microsoft Azure Add-on - What attributes will be collected for users (azure:aad:user)?

Splunk Dashboards Beta App - System Requirements

DLTK search error for sending to container

How to identify that my dashboard is using Advanced XML or Simple XML?

how to open a lookup editor app dashboard?

Query for split or replace command to just fetch incident number from subject

Microsoft Office 365 Reporting Add-on for Splunk is Unstable

Will the sourcetype be created automatically

Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error

Lookup table suddenly showing no data rows

3D Graph Network Topology Unknown search command fit

How can SC4S be deployed to provide high availability?

Module missing in Cisco AMP events input

Limiting ingested fields in Azure Event Hubs

How can I benchmark my Machine Learning forecasting procedure?

[Help] - How to remove duplicated events in this specific scenario

No Errors and no logs with Microsoft Office 365 Reporting Add-on for Splunk

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Dell Network Switch Addon

Microsoft Azure Add-on - What attributes will be c...

DLTK search error for sending to container

Module missing in Cisco AMP events input

No Errors and no logs with Microsoft Office 365 R...

AS400 Forwarder App