All Apps and Add-ons

Community Activity

Duplicative JSON events in all but one App We are having an issue with duplicative JSON fields coming from Duo (the 2FA provider) events. Our senario seems to b... by peterm30 Path Finder in All Apps and Add-ons 07-15-2021 0 4	0	4
BMC Remedy add on in a search head cluster I am having trouble using the BMC Remedy Add on in a search head cluster environment. First issue I am running into ... by ialahdal Path Finder in All Apps and Add-ons 07-15-2021 0 3	0	3
ServiceNow Security Operations add-on for Splunk - missing passwords.conf? Hi All,we are trying to install the ServiceNow Security Operations add-on for Splunk, and after we add in the require... by becksyboy Contributor in All Apps and Add-ons 07-15-2021 0 2	0	2
Microsoft Teams Add-on for Splunk - issue to get next data Hi all,I'm having issue with this add-on "Microsoft Teams Add-on for Splunk".I currently use the add-on to get Teams ... by Cbr1sg Path Finder in All Apps and Add-ons 07-15-2021 0 0	0	0
Secure Gateway - Websocket empty response Hi, we re trying to setup the Secure Gateway app to register mobile devices in a Splunk Dev/Test instance but the "We... by joshiro Communicator in All Apps and Add-ons 07-14-2021 0 0	0	0
ClamAV not showing up in dashboard Any ideas for troubleshooting clamav not showing up in the linux dashbord? by seanirishi Observer in All Apps and Add-ons 07-14-2021 0 0	0	0
Question on subnet configuration in Hurricane Labs App for Shodan Hi All,I have come across quite a few old posts around subnet configuration in Hurricane Labs App for Shodan (https:/... by km1986 Path Finder in All Apps and Add-ons 07-14-2021 0 0	0	0
Applications To whom it my concern,Good morning to you all. My name is Jason S. and I work in the Cyber and Defense section for th... by jada7984 New Member in All Apps and Add-ons 07-14-2021 0 2	0	2
REGEX in blacklist doesn't work as intended Hello folks, I encountered a problem when trying to filter events from WinEventLog and EventCode 4662. When I use th... by osakachan Communicator in All Apps and Add-ons 07-13-2021 0 2	0	2
O365 and Azure AD - estimation of volume of data I've been asked to estimate how much license is needed to ingest Office 365 (and Azure AD) logs. Not sure what varia... by jimmoriarty Path Finder in All Apps and Add-ons 07-13-2021 0 1	0	1
Extracting results to a csv file Hi, I was wondering if I could do two things. I am new to splunk so please have mercy on me. I am looking for a query... by Djackson72 New Member in All Apps and Add-ons 07-13-2021 0 1	0	1
DB Connect Lookup failing, sending NULL to SQL server I am using DB connect AddOnn 3.1.3 and my results are not being enriched. When setting up the DB Connect Lookup wizar... by arrowecssupport Communicator in All Apps and Add-ons 07-13-2021 1 1	1	1
Splunk Addon-builder and OAuth2 Hi all, After searching for the answer, I only found some very old posts from 2015 or so...I am trying to use the Spl... by llacoste Path Finder in All Apps and Add-ons 07-12-2021 0 1	0	1
Problem with TA-Webtools curl POST method with JSON datafield? I think there may be a bug with the use of datafield in the POST operation with curl. Currently the curl.py python (l... by bowesmana SplunkTrust in All Apps and Add-ons 07-11-2021 1 4	1	4
Global protect dashboard empty I have some of the dashboards showing information and some do not. Currently I'm working on getting the global prote... by Iwdavies Path Finder in All Apps and Add-ons 07-09-2021 0 3	0	3
SQS-Based-S3 Input for Cloudtrail - Does it support "blacklist" and "Exclude describe events" ? Hi,I am using SQS-Based-S3 Inputs (multiple inputs retrieving from the queue) to ingest CloudTrail data. The document... by deepamshah Explorer in All Apps and Add-ons 07-09-2021 0 1	0	1
Splunk App for Content Packs v1.2.0 - DA-ITSI-CP-m365 - missing NameValue transform The o365:management:activity stanza within DA-ITSI-CP-m365/default/props.conf contains the following line:REPORT-name... by chris_barrett SplunkTrust in All Apps and Add-ons 07-08-2021 0 0	0	0
DBConnect 3.1.4 Input I have setup and configured DB Connection (version 3.1.4) and have been able to get my identities and connections set... by willadams Contributor in All Apps and Add-ons 07-08-2021 0 2	0	2
DATA Configuration for Splunk Add-on for NetApp Data ONTAP Hello everyone,We have already data from NetApp in our Splunk.Netapp filter ---> rsyslog - forward directly to splunk... by nan2021 Observer in All Apps and Add-ons 07-08-2021 0 1	0	1
Cisco eStreamer eNcore 4.6.0 Add-on for Splunk 8.2.0 - splencore clean and status arguments are missing This addon has two inputs that no longer seem to be valid arguments for splencore.sh, "clean", and "status". I've di... by splunk219783 Path Finder in All Apps and Add-ons 07-07-2021 0 0	0	0
Security Essentials Hi all,A 3rd party has installed Splunk SE and it hasn't been fully configured. I'm looking at the Basic Malware Outb... by pglover Engager in All Apps and Add-ons 07-06-2021 0 1	0	1
Palo Alto firewall: FIFO? I am a noob to Enterprise Security.We recently had a PA event, and the matter of FIFO exceptions for PA devices came ... by jasongb Path Finder in All Apps and Add-ons 07-06-2021 0 1	0	1
Archive to 2 different locations using coldToFrozenScript ? Hello has anyone had any experience with setting up the coldToFrozenScript to archive to 2 different locations? by pedronavarro110 Loves-to-Learn Lots in All Apps and Add-ons 07-06-2021 0 2	0	2
Do apps built by add-on builder 3.0.1 safe from python 3 compatibility concerns? Hi, Our app was built from Splunk add-on builder 3.0.1 which is supposed to support both python2 and python3. We use ... by cool_cat Observer in All Apps and Add-ons 07-06-2021 0 0	0	0
IMAP Mailbox - Duplicate events Hi. I installed IMAP Mailbox app in our distributed server deployment where setting is Heavy forwarder ---> Clust... by d4rk_sp1d3r Loves-to-Learn Lots in All Apps and Add-ons 07-06-2021 0 2	0	2