All Apps and Add-ons

Discussions

Thread Info

Splunk Analytics for Hadoop: Why does streaming search over a short timerange work but it doesn't complete over longer timerange?

We are running Splunk v6.5.1 with HortonWorks HDP v2.5. I can run a streaming search (not mapreduce) on a short timer...

by Builder in

Splunk MINT: Why are unhandled crash reports not always uploaded to Splunk?

There appears to be a flushing issue causing crash reports to be clipped or not uploading. We've configured it li...

by New Member in

Splunk DB Connect 2: Fails to connect to MS SQL using configured identity

I have recently installed DB Connect v2.3.0 on Windows Server 2012 R2, following instructions found at this URL: d...

by Path Finder in

Splunk DB Connect: How to resolve error "Database 'NULL' does not exist"?

Hello, after a while my Splunk DB Connect instance stopped working and I noticed this particular error message: ...

by Path Finder in

Is Splunk DB Connect 2.1 compatible with Splunk Enterprise 6.5?

Hi, I will be upgrading our Splunk Enterprise from 6.4.0 to 6.5.x. We are using Splunk DB Connect 2.1.0. Does anyo...

by Contributor in

Where can I download an older version of the Splunk Add-on for Cisco Identity Services, such as version 2.1?

My Splunk version is 6.2.11 and the latest release of the Splunk Add-on for Cisco Identity Services says it supports ...

by New Member in

Splunk Add-on for Cisco ASA: How to edit my configurations to filter events I do not want in local files?

This seems to be a common and easy problem to resolve, but I can't seem to get to the right answer. Recently I ins...

by Explorer in

Splunk DB Connect: How to ingest only recent Oracle DB logs?

I am trying to ingest logs residing in Oracle DB through Splunk DB Connect (DB2), it dates back to couple of years. C...

by Communicator in

Is it possible to set up and use the Splunk Add-on for Unix and Linux without a forwarder?

Is it possible to setup and use the Splunk Add-on for *Nix, and splunk_TA_Nix, without having to actually install the...

by New Member in

When creating an alert, why do I receive "Error in 'inputlookup' command: This command is not supported in a real-time search" message?

We are trying to create an alert when 911 is called. For testing purposes, we made a call from our cell phone and run...

by New Member in

Splunk DB Connect: How to ingest logs that were recovered from a forwarder?

I am currently trying to recover logs that were not indexed over the Christmas break due to a forwarder going down. N...

by Builder in

Splunk DB Connect: How to resolve when RPC Service is down when initially setting up the add-on?

Hi, I'm attempting (badly) to get the Splunk DB Connect add-on working. Here is what I've done so far: Installe...

by Motivator in

Is the collection script for the Splunk Add-on for Check Point OPSEC LEA just pulling the log files or is it pulling events over an API directly?

Hi Splunkers, We have a customer that is collecting Check Point fw, ips, and vpn logs via Opsec. Check Point versi...

by Path Finder in

Splunk DB Connect: How to resolve error in dbx2.log "Exception: Invalid java path" and empty inputs.conf?

I have a problem after an unexpected restart of my splunk. The Splunk DB Connect app v. 2.3.0 doesn’t work proper...

by Explorer in

When does the admon input generate an update event (admonEventType=Update)?

Hi Splunkers, I am struggling a little bit with the documentation of the Active Directory Monitoring input of Splunk...

by Path Finder in

splunk add on for Remedy - Incident triggered for Alerts capture Issue

Hi, I have created an alert and used splunk add on for Remedy to trigger incidents. Since I made few changes to A...

by Explorer in

Is Oracle WebLogic App for Splunk compatible with Splunk 6.4.x

Hello, Is Oracle WebLogic App for Splunk compatible with Splunk 6.4.x. On Splunk base https://splunkbase.splunk.co...

by Contributor in

Splunk Stream: Is there a workaround for this error "Decoding sFlow version 589829 is not supported yet"?

I am trying to get Splunk Stream working with Flows from an ASA v9.6(2). I finally have it mostly working but now I'm...

by Explorer in

In an indexer cluster, how to configure an Intermediate Forwarder to filter data before indexing?

The development environment was easy. My indexer cluster production environment (Splunk 6.4.1) is making this difficu...

by Path Finder in

Is there already an app that will monitor sysmon via UDP for Unix or Linux machines?

Hi My company is looking to run a POC on Splunk for sysmon via UDP for a few hundred Unix / Linux machines. Is ...

by Influencer in

linux cpu utilization

Hey everyone. I need to collect linux cpu utilization from forwarder, so what i did: 1. install universal forwarde...

by Communicator in

Why my website monitoring only check 1 time

HI guys, I installed the website monitoring in our Splunk Search head. but it seems like only do the check one time w...

by Explorer in

Splunk CIM index contraints

In a distributed environment why does the splunk cim setup screen only see the indexes defined on the local search he...

by Explorer in

S.o.S - Splunk on Splunk & 6.5.0: How to resolve "Error in 'rex' command...invalid range in character class"?

Error in 'rex' command: Encountered the following error while compiling the regex 'search(_|\s)--id=(?<sid>[_-\w\.]+)...

by Engager in

AppDynamics: Is there a script to automate the extraction of metrics using API?

Community, I'm want to automate the extraction of metrics from AppDynamics using the API. Has anyone created a scr...

by New Member in

Get Updates on the Splunk Community!

All Apps and Add-ons

Discussions

Splunk Analytics for Hadoop: Why does streaming search over a short timerange work but it doesn't complete over longer timerange?

Splunk MINT: Why are unhandled crash reports not always uploaded to Splunk?

Splunk DB Connect 2: Fails to connect to MS SQL using configured identity

Splunk DB Connect: How to resolve error "Database 'NULL' does not exist"?

Is Splunk DB Connect 2.1 compatible with Splunk Enterprise 6.5?

Where can I download an older version of the Splunk Add-on for Cisco Identity Services, such as version 2.1?

Splunk Add-on for Cisco ASA: How to edit my configurations to filter events I do not want in local files?

Splunk DB Connect: How to ingest only recent Oracle DB logs?

Is it possible to set up and use the Splunk Add-on for Unix and Linux without a forwarder?

When creating an alert, why do I receive "Error in 'inputlookup' command: This command is not supported in a real-time search" message?

Splunk DB Connect: How to ingest logs that were recovered from a forwarder?

Splunk DB Connect: How to resolve when RPC Service is down when initially setting up the add-on?

Is the collection script for the Splunk Add-on for Check Point OPSEC LEA just pulling the log files or is it pulling events over an API directly?

Splunk DB Connect: How to resolve error in dbx2.log "Exception: Invalid java path" and empty inputs.conf?

When does the admon input generate an update event (admonEventType=Update)?

splunk add on for Remedy - Incident triggered for Alerts capture Issue

Is Oracle WebLogic App for Splunk compatible with Splunk 6.4.x

Splunk Stream: Is there a workaround for this error "Decoding sFlow version 589829 is not supported yet"?

In an indexer cluster, how to configure an Intermediate Forwarder to filter data before indexing?

Is there already an app that will monitor sysmon via UDP for Unix or Linux machines?

linux cpu utilization

Why my website monitoring only check 1 time

Splunk CIM index contraints

S.o.S - Splunk on Splunk & 6.5.0: How to resolve "Error in 'rex' command...invalid range in character class"?

AppDynamics: Is there a script to automate the extraction of metrics using API?

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?

Scripting off of an Alert - Can't Create New Alert...

Log's are not receiving from the OCI add-on

Monitoring SQLite DB through DB connect giving "nu...

Splunk Add-on fails Splunk cloud inspection test

Using learning with toolkit in splunk