All Apps and Add-ons

Discussions

Thread Info

Splunk on Splunk not matching to resources on server

My indexers are running 6gb ram and 6 cores. In Splunk on Splunk under CPU/Memory Usage, the graphs for CPU Usage are...

by Contributor in

Connectivity to Check Point OPSEC LEA reset, now missing data. Any way to load the old data once connection re-established?

Our connectivity to Check Point was broken for a few days. As a result, Splunk has a gap of time in the data. Data is...

by Splunk Employee in

SCCM App for Splunk: Why am I getting create collection lookup error "command="dbquery", A database error occurred: Invalid object name..."?

I'm going through the dev post found here - http://devpost.com/software/splunk-sccm-64z3c This may be my inexperie...

by Path Finder in

Technology Add-on for Cisco Secure Access Control Server (ACS): Are there recommended searches for reporting on this sourcetype?

Greetings; I plan to install the Cisco ACS TA on all of my universal forwarders (those receiving syslog data from ...

by Communicator in

Is it possible to generate an output file every millisecond or microsecond using the Eventgen app?

Hi, I am using these configurations: [customerTransactionList.template] interval = 5 earliest = -60m latest = n...

by Explorer in

Splunk forwarder for Sophos and FreeNAS help

Hey guys so I'm new to Splunk and setup Splunk Enterprise on AWS to monitor my AWS environment. I would like to l...

by New Member in

Splunk DB Connect 2: Why am I getting "Exception encountered for entity-name = mylookup and type = lookup java.lang.OutOfMemoryError: Java heap space"?

Splunk DB Connect 2 is proving very difficult to get up and running: 2016-02-01 21:05:45 ERROR DBX2Proxy:52 - Exce...

by Path Finder in

Can the Splunk Add-on for Bro IDS be used with Splunk Light?

After spending what feels like too much time on this project, I am getting the strong idea that Splunk Light simply d...

by Explorer in

Has anyone encountered an error while trying to update the tripwire setup page?

When trying to update the tripwire 1.5.1 setup page, i'm receiving the following error: In handler 'localapps'. Error...

by Engager in

Writing an app that will require REST API Modular Input as a dependency, what is the best method of incorporating this into the app?

I'm in the process of writing an app that will require the REST API Modular input as a dependency, including at least...

by Splunk Employee in

Splunk DB Connect 2.1.1: Why is "shortnames = t" not preventing the renaming of columns?

I'm having trouble getting the results of a database query to not rename the columns. In the documentation, it sugges...

by Explorer in

Splitting JSON Respone into Rows for each event - Akamai Data

I'm using the REST API app and I'm having a bit of trouble figuring out the response handlers and/or Splunk dealing w...

by New Member in

How to set up a Splunk DB Connect 2 Lookup that is available in the Search App?

I am using DB Connect 2 to pull information from database into a lookup table. It is setup correctly but the lookup t...

by Path Finder in

Splunk Common Information Model: If my data source can generate multiple user names related to an intrusion detection event, how do I handle this?

The current definition for this field is this: IDS_Attacks| user | string | The user involved with the intrusion dete...

by Splunk Employee in

Palo Alto Networks App for Splunk: Why do Palo Alto URL Filtering logs suddenly stop coming in after a while?

Hi, Our URL filtering logs suddenly stopped coming, but we see it in the overview dashboard. When we restart the ...

by New Member in

SmokePing, Cacti results into Splunk?

Anyone tried piping SmokePing or Cacti results into Splunk?

by Explorer in

Monitoring of Java Virtual Machines with JMX 2.2: How to troubleshoot error "Exception in thread "Thread-15435" java.lang.OutOfMemoryError: Java heap space"?

I'm seeing this in the splunkd.log after Monitoring of Java Virtual Machines with JMX has been running for approx 1 1...

by Path Finder in

How to install the Cisco Networks App and Add-on in a distributed search environment?

We are deploying a distributed Splunk instance. I install the TA-cisco_ios in my Indexers. Is there any other place n...

by New Member in

Splunk Support for Active Directory: Why does our ldapsearch never complete?

Hello, We are trying to pull a full list of identities from Active Directory to use with Enterprise Security. We a...

by Path Finder in

Splunk Mobile & DMZ: Which ports should be open ?

I am trying to configure Splunk Mobile Access on one of our customers, and I couldn't find much information regarding...

by Motivator in

Why isn't the new Splunk Add-on for Bro IDS 3.1.4 parsing Bro fields from the files?

Any thoughts on why the new Splunk Add-on for Bro IDS isn't formatting the BRO fields in the files? Do I need to manu...

by Path Finder in

Splunk App for Salesforce won't download

Did the app get taken down? It seems the app is no longer available for download.

by Explorer in

Props.conf not being applied when using JMS Modular Input

I am using the SPlunk JMS Modular Input to read data off a JMS Queue. I've set up the Modular Input and data is being...

by Contributor in

What is the best way to pass Snort logs into the Splunk for Snort app?

What is the best way to pass Snort logs into the Splunk for Snort App? Should I use a mount or a forwarder? Or any ot...

by Path Finder in

Cisco Networks App for Splunk Enterprise: Why am I getting error "invalid vector T subscript" on a lot of pivots?

I receive the following error on a lot of pivots starting with the top most "Cisco IOS Event" 09-30-2015 16:42:24....

by Explorer in

Get Updates on the Splunk Community!

All Apps and Add-ons

Discussions

Splunk on Splunk not matching to resources on server

Connectivity to Check Point OPSEC LEA reset, now missing data. Any way to load the old data once connection re-established?

SCCM App for Splunk: Why am I getting create collection lookup error "command="dbquery", A database error occurred: Invalid object name..."?

Technology Add-on for Cisco Secure Access Control Server (ACS): Are there recommended searches for reporting on this sourcetype?

Is it possible to generate an output file every millisecond or microsecond using the Eventgen app?

Splunk forwarder for Sophos and FreeNAS help

Splunk DB Connect 2: Why am I getting "Exception encountered for entity-name = mylookup and type = lookup java.lang.OutOfMemoryError: Java heap space"?

Can the Splunk Add-on for Bro IDS be used with Splunk Light?

Has anyone encountered an error while trying to update the tripwire setup page?

Writing an app that will require REST API Modular Input as a dependency, what is the best method of incorporating this into the app?

Splunk DB Connect 2.1.1: Why is "shortnames = t" not preventing the renaming of columns?

Splitting JSON Respone into Rows for each event - Akamai Data

How to set up a Splunk DB Connect 2 Lookup that is available in the Search App?

Splunk Common Information Model: If my data source can generate multiple user names related to an intrusion detection event, how do I handle this?

Palo Alto Networks App for Splunk: Why do Palo Alto URL Filtering logs suddenly stop coming in after a while?

SmokePing, Cacti results into Splunk?

Monitoring of Java Virtual Machines with JMX 2.2: How to troubleshoot error "Exception in thread "Thread-15435" java.lang.OutOfMemoryError: Java heap space"?

How to install the Cisco Networks App and Add-on in a distributed search environment?

Splunk Support for Active Directory: Why does our ldapsearch never complete?

Splunk Mobile & DMZ: Which ports should be open ?

Why isn't the new Splunk Add-on for Bro IDS 3.1.4 parsing Bro fields from the files?

Splunk App for Salesforce won't download

Props.conf not being applied when using JMS Modular Input

What is the best way to pass Snort logs into the Splunk for Snort app?

Cisco Networks App for Splunk Enterprise: Why am I getting error "invalid vector T subscript" on a lot of pivots?

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

Video | Tom’s Smartness Journey Continues

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Splunk Security Essentials (SSE) - MITRE Data sour...

Splunk UBA Impala Server not reachable

Migration from Duo Splunk Connector question

Why are some fields not extracted properly at Heav...

Splunk Otel Karpenter pod logs not showing