All Apps and Add-ons

Discussions

Thread Info

Recommendation : Capturing events on data lake gateway Vs nodes Hadoop Connect App Splunk

Hi: Please let me know which is the best practice of implementation. Capturing events on data lake gateway Vs n...

by Path Finder in

Splunk App Windows Infrastructure upgrade - No "sourcetype="MSAD*" found

I've recently upgraded to Splunk App for Windows Infrastructure 1.1.1 from version 1.0.4. Previously I had no issues ...

by Explorer in

Splunk App for Windows Infrastructure: Why does the Group Policy changes view displays no results, but I'm able to view the data in a search?

Hello, we are unable to get any kind of results in Group Policy changes section of Splunk App for Windows Infrastruct...

by Communicator in

How do I change thresholds in the Splunk App for VMware?

When I try to change a threshold in the Splunk App for VMware, there is NO pulldown from the settings menu that state...

by New Member in

Why do I see completely different versions of the Splunk App and Add-on for Okta in my client's environment versus what's currently on Splunkbase?

I have a client who installed the Splunk App and Add-on for Okta last May, but they are completely different from the...

by Explorer in

Why do the CloudWatch logs contain XML tags?

We have logs from all of our production servers being pushed to CloudWatch, and we're evaluating Splunk as a better w...

by Engager in

Splunk DB Connect 2.0.5: Why do I keep getting "Login failed..." trying to validate connection with MSSQL?

Windows 2012 search head with Splunk Enterprise 6.3 and the latest DB Connect 2.0.5 installed. It also has DBX 1.1.5 ...

by Path Finder in

Splunk Add-on for Unix and Linux: Transforms.conf [vmstat_linux] stanza has a mistake in the FORMAT label contextswitch:$14. Should be contextswitch::$14

Hi, In the transforms.conf the stanza vmstat_linux has a mistake in the FORMAT label contextswitch:$14 It shou...

by Builder in

How to combine my two search results of a chart and rangemap over time with display icons?

I have two search results: 1. I have a table with list of values for products over a time range 2. I have a table wit...

by Contributor in

Lookup File Editor App: How can a Splunk user with only a user role make changes to existing CSV files?

Hi, We have the problem that we want Splunk users to be able to change existing CSV files, but every time a user w...

by Explorer in

Splunk Add-on for Symantec Endpoint Protection: How to troubleshoot why my universal forwarder monitor configuration is not sending all files?

I installed the universal forwarder on one of my servers (Symantec Endpoint Protection Management Server). I copied i...

by Explorer in

How to configure inputs.conf for the Splunk Add-on for ISC BIND?

The way we do our logging is to a centralized syslog server, using the remote syslog protocol. All our Cisco gear is ...

by New Member in

How can I make the Splunk App for PCI Compliance count "last message repeated 2 times" on su authentication failure in /var/log/secure?

/var/log/secure Jun 29 11:47:58 ecc2 su: pam_unix(su-l:auth): authentication failure; logname=root uid=11130 euid=...

by Contributor in

Receiving logs from Palo Alto Panorama only -- how to display correct "PAN REPORTING" data ?

In the Palo Alto App Overview screen, there is a panel that shows PAN REPORTING -- this is based on "host" which is t...

by Explorer in

Cisco Networks App for Splunk Enterprise: Can anybody share the commands used for NX-OS version, especially for callhome?

In the Cisco Networks App Help tab, most of cisco commands shown there are for IOS. Anybody care to share the command...

by Engager in

*Nix app installed and splunk gets the data but the dashboard are empty

I installed Spunk *Nix app and i activated the scripts and files sources in Splunk Add-on for Unix. Now Splunk gets t...

by New Member in

Color individual table cell based on value

I know that I can color an entire row using the table rowClass param in Sideview like so <param name="rowClass">$row....

by Builder in

How to add an AWS account to the Splunk Add-on for Amazon Web Services via the Splunk_TA_aws directory?

We use clustered search heads and clustered forwarders. All the documents on how to set up the AWS account seem to be...

by Explorer in

Reinstalling Splunk DB Connect 2, why will the RPC Service not start and cannot find Java?

Trying to re-install the Splunk DB Connect 2 app from scratch. However, receiving multiple errors regarding the RCP S...

by Engager in

How do I implement visualizations from the Splunk 6.x Dashboard Examples app into my dashboard?

Hi. I downloaded the Splunk 6.x Dashboard Examples app and found an example that I want to use (It's the Table Ic...

by Communicator in

After migrating from a standalone search head to a search head cluster, why is the search_migrated app showing up as the Website Monitoring app?

We have migrated our settings from a standalone Splunk search head (views, users, etc) to a search head cluster. We c...

by New Member in

Is MySQLConnector dead? It's no longer listed on Splunkbase.

It's no longer listed on the apps page: https://apps.splunk.com/apps/id/MySQL I'm creating a new Splunk machine (6...

by Path Finder in

How to confirm if the IP Reputation App for Splunk Enterprise is connecting to the Honeypot to retrieve bad IPs?

I have set up the app and I think it is working, but how do I confirm that a list of Bad IP is being created? I presu...

by New Member in

Will the Splunk App for Unix and Linux on a Windows server report on Linux metrics coming from a universal forwarder on Linux?

Will the Windows version of the "Splunk App for Unix and Linux" report on Linux metrics? My Splunk Servers are Win...

by Path Finder in

Splunk MINT: Why am I getting configuration error "authentication exception 'HTTPSConnectionPool(host='...', port=443): Max retries exceeded..."?

The following is the error I am getting while trying to configure Splunk MINT on our enterprise, and I know port 443 ...

by Builder in

Get Updates on the Splunk Community!

All Apps and Add-ons

Discussions

Recommendation : Capturing events on data lake gateway Vs nodes Hadoop Connect App Splunk

Splunk App Windows Infrastructure upgrade - No "sourcetype="MSAD*" found

Splunk App for Windows Infrastructure: Why does the Group Policy changes view displays no results, but I'm able to view the data in a search?

How do I change thresholds in the Splunk App for VMware?

Why do I see completely different versions of the Splunk App and Add-on for Okta in my client's environment versus what's currently on Splunkbase?

Why do the CloudWatch logs contain XML tags?

Splunk DB Connect 2.0.5: Why do I keep getting "Login failed..." trying to validate connection with MSSQL?

Splunk Add-on for Unix and Linux: Transforms.conf [vmstat_linux] stanza has a mistake in the FORMAT label contextswitch:$14. Should be contextswitch::$14

How to combine my two search results of a chart and rangemap over time with display icons?

Lookup File Editor App: How can a Splunk user with only a user role make changes to existing CSV files?

Splunk Add-on for Symantec Endpoint Protection: How to troubleshoot why my universal forwarder monitor configuration is not sending all files?

How to configure inputs.conf for the Splunk Add-on for ISC BIND?

How can I make the Splunk App for PCI Compliance count "last message repeated 2 times" on su authentication failure in /var/log/secure?

Receiving logs from Palo Alto Panorama only -- how to display correct "PAN REPORTING" data ?

Cisco Networks App for Splunk Enterprise: Can anybody share the commands used for NX-OS version, especially for callhome?

*Nix app installed and splunk gets the data but the dashboard are empty

Color individual table cell based on value

How to add an AWS account to the Splunk Add-on for Amazon Web Services via the Splunk_TA_aws directory?

Reinstalling Splunk DB Connect 2, why will the RPC Service not start and cannot find Java?

How do I implement visualizations from the Splunk 6.x Dashboard Examples app into my dashboard?

After migrating from a standalone search head to a search head cluster, why is the search_migrated app showing up as the Website Monitoring app?

Is MySQLConnector dead? It's no longer listed on Splunkbase.

How to confirm if the IP Reputation App for Splunk Enterprise is connecting to the Honeypot to retrieve bad IPs?

Will the Splunk App for Unix and Linux on a Windows server report on Linux metrics coming from a universal forwarder on Linux?

Splunk MINT: Why am I getting configuration error "authentication exception 'HTTPSConnectionPool(host='...', port=443): Max retries exceeded..."?

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

Transform your security operations with Splunk Enterprise Security

Splunk Admins and App Developers | Earn a $35 gift card!

How to create a new token by concatenating a value...

Error on creating a PubSub input from a service-ac...

'Telegram Alert Action' Add on cannot send alert

BrowsingHistoryView not working properly

DB connect postgres database SQL statement Unix ti...