All Apps and Add-ons

Discussions

Thread Info

App for Web Proxies: Why is the Web Data Model stuck building?

Web Web Data Model MODEL Objects 2 Events Edit Permissions Shared Globally. Owned by nobody. Edit ACCELERATION Rebuil...

by Communicator in

Will the Splunk DB Connect app eat up my monthly index cap we have as part of our license?

I'm an analyst not a sysadmin, but I'm looking into proposing we use Splunk DB Connect. The one concern I'm trying to...

by Path Finder in

Splunk 6.x Dashboard Examples:How to use the .js file to implement "Table Row Expansion" in Splunk Cloud?

I would like to implement "Table Row Expansion". We use Splunk Cloud and wanted to know how to use the .js file?

by Explorer in

What is the best way to get Common Information Model (CIM) field extractions for Audit logs?

What is the best way to get Common Information Model (CIM) field extractions for Auditd Logs?

by Path Finder in

This query runs in Splunk DB Connect 1, but why does it not work in Splunk DB Connect 2?

The query below is running in Splunk DB Connect version 1 but not in version 2. SELECT (SELECT COUNT() FROM Reques...

by Explorer in

Can Kafka Messaging Modular Input work with Kafka 2.10-8.2.2?

I need to pull data from a Kafka topic running version 8.2.2 with Scala 2.10. Can I just drop the kafka_2.10-8.2.2.ja...

by New Member in

Splunk App for Unix and Linux: I set an alert to fire if CPU is greater than 30%, but why is it not getting triggered as expected?

I have the Splunk App for Unix and Linux on trial license and have set an alert to fire if CPU is greater that 30% to...

by New Member in

Splunk Add-on for Nessus: Why am I getting error "NessusConfigException: Cannot get the encrypted keys."?

I am getting this error while trying to integrate Nessus logs with Splunk: 2016-05-13 04:55:06,583 ERROR pid=9133...

by Contributor in

Windows Technology Add-on

From looking at the available apps, I see that this app is only available for Splunk Enterprise 5.x. I have a windows...

by New Member in

IMAP Mailbox: Is cloning the TA the only way to monitor several mailboxes?

The mailbox is part of the TA config. Is cloning the TA really the only way to monitor several mailboxes, or am I mis...

by Communicator in

Tenable Network Security PVS App for Splunk: How to troubleshoot why field extractions are not working?

Greetings, I have a few PVS's coming through syslog via TCP. I have set index=pvs, sourcetype=pvs:internal (for th...

by Builder in

looking for source repo for IMAP Mailbox

hey Splunk / @ragingwire - are there any plans to create a repo for the IMAP Mailbox source? would you like to st...

by Contributor in

DB Connect 2: DBoutput tests OK, but why does the scheduled output fail to insert search results in the database with an "Unauthorized" error in dbx2.log?

Fresh install of DB Connect 2 (2.1.2) on Splunk Enterprise search head (6.3.1). We've been able to configure a Connec...

by Path Finder in

Can I customize the incident_id field value in the Alert Manager app?

Currently, the incident_id field is automatically populated with a long string of random characters, like this: 6e...

by New Member in

Report for event timestamp & indexed timestamp

Hey Guys - I am looking to create a simple report with event timestamp & indexed timestamp information but not abl...

by Builder in

IPFIX Add-On failing when using Virtual Indexer

Have IPFIX setup successfully with a Virtual Index on my Hadoop Cluster but it keeps erroring with the below message....

by New Member in

REST API Modular Input: How to make additional requests through a custom response handler?

I'm working with the rabbitMQ API and trying to make additional requests through a custom response handler. We ca...

by Explorer in

How to increase textfield size in formsearch

I am using module=textfield in formsearch. I lookslike text box is smaller to enter full our search string. How do I ...

by Path Finder in

Mac OSX 10.11.1 (El Capitan) & Spunk 6.3 - "Splunk's Little Helper" Startup / Shutdown Hangs and work around.

Yo Splunkers, I am a Splunk 6.3 user, supporting users running on Mac OS X 10.11.1. Yesterday I spent about 1.5 hours...

by Engager in

Disable THP in AWS (Linux AMI)

How do you disable Transparent Hugepages in an Amazon AWS environment that doesn't support systemctl or systemd?

by Path Finder in

Splunk Add-on for Microsoft Azure: Is there a reason Splunk keeps retrieving the same data from Azure?

I currently have the Splunk Add-on for Microsoft Azure for Splunk installed, but have noticed that each time it polls...

by Engager in

Splunk DB Connect 2: Slash ("/") in SQL query always return 0 rows

Splunk 6.2.6, DB Connect 2.1.1 When I run a SQL query with a / inside, Splunk will always return 0 rows. For examp...

by Explorer in

Where is the sourcetype "Perfmon:FreeDiskSpace" within the Splunk Add-on for Microsoft Windows?

Hi. We use Perfmon for our Windows Systems, but we are missing the sourcetype "Perfmon:FreeDiskSpace". We downloa...

by Explorer in

How to trigger alert in timechart field for every 10 min count

Hi, I have a query which is in timechart: index=PQR sourcetype=abc NOT "\\x00\\x00\\x00\\x00\\x00"|timechart c...

by Explorer in

How to set up a central syslog server and Splunk forwarders without forwarding duplicate data?

All our many Unix servers are already set up to send syslog data to a central syslog server for archival. I have a Sp...

by Explorer in

Get Updates on the Splunk Community!

All Apps and Add-ons

Discussions

App for Web Proxies: Why is the Web Data Model stuck building?

Will the Splunk DB Connect app eat up my monthly index cap we have as part of our license?

Splunk 6.x Dashboard Examples:How to use the .js file to implement "Table Row Expansion" in Splunk Cloud?

What is the best way to get Common Information Model (CIM) field extractions for Audit logs?

This query runs in Splunk DB Connect 1, but why does it not work in Splunk DB Connect 2?

Can Kafka Messaging Modular Input work with Kafka 2.10-8.2.2?

Splunk App for Unix and Linux: I set an alert to fire if CPU is greater than 30%, but why is it not getting triggered as expected?

Splunk Add-on for Nessus: Why am I getting error "NessusConfigException: Cannot get the encrypted keys."?

Windows Technology Add-on

IMAP Mailbox: Is cloning the TA the only way to monitor several mailboxes?

Tenable Network Security PVS App for Splunk: How to troubleshoot why field extractions are not working?

looking for source repo for IMAP Mailbox

DB Connect 2: DBoutput tests OK, but why does the scheduled output fail to insert search results in the database with an "Unauthorized" error in dbx2.log?

Can I customize the incident_id field value in the Alert Manager app?

Report for event timestamp & indexed timestamp

IPFIX Add-On failing when using Virtual Indexer

REST API Modular Input: How to make additional requests through a custom response handler?

How to increase textfield size in formsearch

Mac OSX 10.11.1 (El Capitan) & Spunk 6.3 - "Splunk's Little Helper" Startup / Shutdown Hangs and work around.

Disable THP in AWS (Linux AMI)

Splunk Add-on for Microsoft Azure: Is there a reason Splunk keeps retrieving the same data from Azure?

Splunk DB Connect 2: Slash ("/") in SQL query always return 0 rows

Where is the sourcetype "Perfmon:FreeDiskSpace" within the Splunk Add-on for Microsoft Windows?

How to trigger alert in timechart field for every 10 min count

How to set up a central syslog server and Splunk forwarders without forwarding duplicate data?

Notification Email Migration Announcement

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk alert to Slack message URL encode something

SSL Issue in testing LOCAL Splunk : [SSL: CERTIFIC...

Pantag Error_Key Expired

Jira Service Management

Qualys Technical Add-On Setup Page Not Loading on ...