All Apps and Add-ons

Discussions

Thread Info

Query for split or replace command to just fetch incident number from subject

My query fetches ( recipient, time, subject) in table. However, my requirement is to split incident number ( INC0002...

by Explorer in

Microsoft Office 365 Reporting Add-on for Splunk is Unstable

We are using version 1.1 of Microsoft Office 365 Reporting Add-on for Splunk, but the app stops pulling the data very...

by Path Finder in

Will the sourcetype be created automatically

When we install an App (any app) in Splunk, will the sourcetype be created automatically?

by Explorer in

Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error

Installed and configured Microsoft Office 365 Reporting Add-on for Splunk but it doesn't seem to be pulling any data....

by Path Finder in

Lookup table suddenly showing no data rows

One of my new colleagues was working on a lookup in a splunk app and seems to have somehow made a lookup table unavai...

by New Member in

Routing data to separate index using (?!...)

Hello. Trying to resolve an issue with routing log events. The goal is to route log events with an "Api" keyword t...

by Loves-to-Learn in

How to identify that my dashboard is using Advanced XML or Simple XML?

The Advanced XML is not supported with the Splunk upgraded version of 8.X - So how can I identify that which XML is...

by Path Finder in

3D Graph Network Topology Unknown search command fit

Hello, I am new to splunk so I will try to be as clear as possible. I wanted to test the visualization of networkx ...

by New Member in

How can SC4S be deployed to provide high availability?

How can Splunk Connect for Syslog be deployed in a way that reduces/avoids lost events?

by Splunk Employee in

Module missing in Cisco AMP events input

I'm running Cisco AMP events input on Splunk 8 on python 2.7.17 and received the following error after configuring th...

by Explorer in

Limiting ingested fields in Azure Event Hubs

I"d like to send audit data through an event hub. However, i want my heavy fwd'r to not send all fields to splunk a...

by Engager in

How can I benchmark my Machine Learning forecasting procedure?

Hi I am forecasting the number of logins. My dataset has the number of logins by the hour (1 month). I use a) and...

by Communicator in

[Help] - How to remove duplicated events in this specific scenario

Hi Team, I have audited below user behavior data on web UI. For ACT=OPEN_PAGE, which means user open a web UI pa...

by Explorer in

No Errors and no logs with Microsoft Office 365 Reporting Add-on for Splunk

Hello, i have installed the Reporting Add-on and fixed the Error 500. The Add-On is now connecting to Mircosoft and...

by Observer in

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Below is one improvement (which saves a significant amount of money/resources) and one bug fix (which improves ingest...

by Path Finder in

Dell Network Switch Addon

I'm getting logs from my Dell switches, but I can't find a suitable addon. Is there a current Dell or other addon tha...

by Path Finder in

AS400 Forwarder App

I require to send OS and Authorisation logs from a AS400 server to Splunk, unfortunately no universal forwarder exist...

by New Member in

TA-MS_Defender / Microsoft Defender ATP Add-on for Splunk: Configuration Page / Accounts tab "hangs" endlessly

Installed the TA on a sandbox standalone machine with splunk 7.3.3- If i try to configure stuff in the "Configuratio...

by Observer in

How can I validate Azure Storage account connected with the Splunk Add-on for Microsoft Cloud Services.

Hi, We have a requirement to monitor Azure logs from Splunk. For that we need to complete the following steps...

by Explorer in

Bluecoat ProxySG logs parsing properly

Hi experts Bluecoat proxysg logs are not parsing properly, we are sending logs from Bluecoat proxy to syslog-ng se...

by Loves-to-Learn in

All Apps and Add-ons

Discussions

Query for split or replace command to just fetch incident number from subject

Microsoft Office 365 Reporting Add-on for Splunk is Unstable

Will the sourcetype be created automatically

Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error

Lookup table suddenly showing no data rows

Routing data to separate index using (?!...)

How to identify that my dashboard is using Advanced XML or Simple XML?

3D Graph Network Topology Unknown search command fit

How can SC4S be deployed to provide high availability?

Module missing in Cisco AMP events input

Limiting ingested fields in Azure Event Hubs

How can I benchmark my Machine Learning forecasting procedure?

[Help] - How to remove duplicated events in this specific scenario

No Errors and no logs with Microsoft Office 365 Reporting Add-on for Splunk

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Dell Network Switch Addon

AS400 Forwarder App

TA-MS_Defender / Microsoft Defender ATP Add-on for Splunk: Configuration Page / Accounts tab "hangs" endlessly

How can I validate Azure Storage account connected with the Splunk Add-on for Microsoft Cloud Services.

Bluecoat ProxySG logs parsing properly

How to identify that my dashboard is using Advance...

Module missing in Cisco AMP events input

No Errors and no logs with Microsoft Office 365 R...

AS400 Forwarder App

TA-MS_Defender / Microsoft Defender ATP Add-on for...