All Apps and Add-ons

Discussions

Thread Info

Splunk Dashboards Beta App - System Requirements

We are currently running a single-instance of Splunk (1 search, 1 indexer) on a c5.4xlarge AWS EC2 instance in a POC ...

by Path Finder in

Routing data to separate index using (?!...)

Hello. Trying to resolve an issue with routing log events. The goal is to route log events with an "Api" keyword t...

by Loves-to-Learn in

PAVO Network Traffic App Missing Geographical Information

Hello, I was able to set up the app to monitor my local windows machine's network, all dashboards in the app display ...

by Engager in

Missing events for PAVO Network Traffic App

Hi, I install PAVO Network Traffic App for Splunk for splunk enterprise 8.0 (60 day trial), but I does not see any da...

by Engager in

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Below is one improvement (which saves a significant amount of money/resources) and one bug fix (which improves ingest...

by Path Finder in

Microsoft Azure Add-on - What attributes will be collected for users (azure:aad:user)?

I would like to setup an identity lookup for Azure AD user accounts in Splunk ES. It looks like the Microsoft Azure ...

by Loves-to-Learn in

Splunk App for Exchange took over trial license

Hello, Recently I've been testing Splunk Enterprise on trial license. Today I Installed Splunk App for Microsoft Ex...

by New Member in

DLTK search error for sending to container

Hi All, I am trying to test DLTK. As I run a search for sending to container, it shows errors: unable to read JSO...

by Explorer in

How to identify that my dashboard is using Advanced XML or Simple XML?

The Advanced XML is not supported with the Splunk upgraded version of 8.X - So how can I identify that which XML is...

by Path Finder in

how to open a lookup editor app dashboard?

hi, I have created a lookup and have opened the lookup using search option...i saved the results of this search int...

by New Member in

Query for split or replace command to just fetch incident number from subject

My query fetches ( recipient, time, subject) in table. However, my requirement is to split incident number ( INC0002...

by Explorer in

Microsoft Office 365 Reporting Add-on for Splunk is Unstable

We are using version 1.1 of Microsoft Office 365 Reporting Add-on for Splunk, but the app stops pulling the data very...

by Path Finder in

Will the sourcetype be created automatically

When we install an App (any app) in Splunk, will the sourcetype be created automatically?

by Explorer in

Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error

Installed and configured Microsoft Office 365 Reporting Add-on for Splunk but it doesn't seem to be pulling any data....

by Path Finder in

Lookup table suddenly showing no data rows

One of my new colleagues was working on a lookup in a splunk app and seems to have somehow made a lookup table unavai...

by New Member in

3D Graph Network Topology Unknown search command fit

Hello, I am new to splunk so I will try to be as clear as possible. I wanted to test the visualization of networkx ...

by New Member in

How can SC4S be deployed to provide high availability?

How can Splunk Connect for Syslog be deployed in a way that reduces/avoids lost events?

by Splunk Employee in

Module missing in Cisco AMP events input

I'm running Cisco AMP events input on Splunk 8 on python 2.7.17 and received the following error after configuring th...

by Explorer in

Limiting ingested fields in Azure Event Hubs

I"d like to send audit data through an event hub. However, i want my heavy fwd'r to not send all fields to splunk a...

by Engager in

How can I benchmark my Machine Learning forecasting procedure?

Hi I am forecasting the number of logins. My dataset has the number of logins by the hour (1 month). I use a) and...

by Communicator in

All Apps and Add-ons

Discussions

Splunk Dashboards Beta App - System Requirements

Routing data to separate index using (?!...)

PAVO Network Traffic App Missing Geographical Information

Missing events for PAVO Network Traffic App

Trimming firewall logs using syslog-ng to conserve license, and a bugfix for the Fortinet FortiGate Add-On for Splunk

Microsoft Azure Add-on - What attributes will be collected for users (azure:aad:user)?

Splunk App for Exchange took over trial license

DLTK search error for sending to container

How to identify that my dashboard is using Advanced XML or Simple XML?

how to open a lookup editor app dashboard?

Query for split or replace command to just fetch incident number from subject

Microsoft Office 365 Reporting Add-on for Splunk is Unstable

Will the sourcetype be created automatically

Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error

Lookup table suddenly showing no data rows

3D Graph Network Topology Unknown search command fit

How can SC4S be deployed to provide high availability?

Module missing in Cisco AMP events input

Limiting ingested fields in Azure Event Hubs

How can I benchmark my Machine Learning forecasting procedure?

PAVO Network Traffic App Missing Geographical Info...

Splunk App for Exchange took over trial license

DLTK search error for sending to container

Module missing in Cisco AMP events input

No Errors and no logs with Microsoft Office 365 R...