All Apps and Add-ons

Discussions

Thread Info

Can someone help me set up the SentinelOne App to be able to create actions based on alerts?

Cannot set up the app to be able to create Actions based on alerts. The Sentinelone Add-on (TA_Sentinelone) is config...

by New Member in

AppInspect and RegEx Capture Groups

In my add-on, I have a RegEx that contains 3 capture groups. However, one of the capture groups is only used within t...

by New Member in

SA-geodistance app - remedy for "buffer full" error?

Hi there. Thanks for this app! I'm experiencing the following error when passing high record volume to geodistance...

by Communicator in

Error 400 when ingesting CronTrigger, CronJobDetail from Salesforce

Full disclosure, I'm a Salesforce guy rather than a Splunk guy. I'm working with my internal Splunk team to try and i...

by New Member in

Vendor_region field missing from Change Data model in the CIM Add-on v4.17

Hi, I am trying to implement some alerts relying on the "vendor_region" field in the "All_Changes" CIM dataset. The...

by Observer in

problems with splunk app for netscaler appflow

Hi, i'm pulling my hair out trying to get ipfix/appflow data flowing into splunk from netscalers. i can see the dat...

by Observer in

Splunk Add-on for ServiceNow - forward compatible for current release Quebec and/or Rome Q3 2021?

Hi, we're starting with an Splunk Service Now integration, customer is using Quebec version. Is the Splunk Add-on for...

by New Member in

Splunk Add-on

Hi Team Like how Splunk Enterprise software pricing is based on the amount of data indexed is there any pricing...

by Explorer in

SNOW TA: How to use filter_data when key-value has javascript

Does anybody know what my inputs.conf setting for filter_data must look like for a key-value like below? I cannot f...

by Path Finder in

Splunk DBConnect 3.1.1 Build 34 There was an error processing your request. It has been logged (ID XXXXXXXXXXXXXXX).

After completing the SQL Query and then setting the properties for an input, I cannot click the finish button without...

by Explorer in

Why Splunk_TA_box Configuration page stuck on "Loading"?

I have freshly installed Splunk_TA_box Add-On and trying to configure account via Web UI but while opening Configurat...

by Loves-to-Learn in

How to get IP geographical information for MAXMIND database?

Hiii guys i have a problem with maxmind application when i use this query: host="ids"|lookup geoip clientip as "...

by New Member in

Splunk GeoIP database

I have one simple question. Does Splunk use paid "GeoLite2-City.mmdb" version or free one. The reason is that, if it ...

by Explorer in

Cisco ACI add-on tenant filter

I'm using the Cisco ACI add-on to retrieve information from the Cisco ACI device but I'm only interested in retrievin...

by Path Finder in

MS Windows AD Objects -- Missing data in lookups

A few days ago I rebuilt all of the lookup lists because I noticed the AD changes we had made weren't picked up in th...

by New Member in

Splunkbase Apps

I was wondering if there were any Splunkbase tools or tools in general that allow for data to interact between Splunk...

by New Member in

Splunk NLTK Tutorial

Hello, I installed Splunk NLTK App for raw text analysis. However, I cannot find any tutorial or guideline on how...

by Path Finder in

Stitch logs from multiple splunk instances to one instance

Dear Users, Need some insights here to solve the issue with consolidating logs into one instance. I have multipl...

by Engager in

Splunk_TA_New_Relic Insight not ingesting data

Hi all, I have installed Splunk_TA_New_Relic v2.2.0 and configured the NR Insight Input. I did not use HTTP proxy a...

by Engager in

Python errors when upgrading Splunk_TA_New_Relic to 2.2.0

Hi all, I have recently upgraded the Splunk_TA_New_Relic to v 2.2.0 on Splunk 8.0.7. Version 2.1.0 worked fine, b...

by Path Finder in

All Apps and Add-ons

Discussions

Can someone help me set up the SentinelOne App to be able to create actions based on alerts?

AppInspect and RegEx Capture Groups

SA-geodistance app - remedy for "buffer full" error?

Error 400 when ingesting CronTrigger, CronJobDetail from Salesforce

Vendor_region field missing from Change Data model in the CIM Add-on v4.17

problems with splunk app for netscaler appflow

Splunk Add-on for ServiceNow - forward compatible for current release Quebec and/or Rome Q3 2021?

Splunk Add-on

SNOW TA: How to use filter_data when key-value has javascript

Splunk DBConnect 3.1.1 Build 34 There was an error processing your request. It has been logged (ID XXXXXXXXXXXXXXX).

Why Splunk_TA_box Configuration page stuck on "Loading"?

How to get IP geographical information for MAXMIND database?

Splunk GeoIP database

Cisco ACI add-on tenant filter

MS Windows AD Objects -- Missing data in lookups

Splunkbase Apps

Splunk NLTK Tutorial

Stitch logs from multiple splunk instances to one instance

Splunk_TA_New_Relic Insight not ingesting data

Python errors when upgrading Splunk_TA_New_Relic to 2.2.0

TA-Mearki IDS/IPS with InfoSec

Okta Identity Cloud Add-on cluster deployment

Cannot download splunk-logging-library from reposi...

[addon] python code validate_input ModularInputs -...

help using transforms to change sourcetype from ne...