All Apps and Add-ons

Ask a Question

Discussions

Thread Info

Website Monitoring: Why am I getting "Fail: Client is not authorized to perform requested action." trying to create a new input?

When I click on Create New, I get the following error: Fail: Client is not authorized to perform requested action.

by New Member in

Forwarding Data To Third Party, Hadoop Connect Issues

Hello, We are trying to send some data to a third party system that is hitting our indexers from Universal Forward...

by New Member in

How to set permissions for the S.o.S - Splunk on Splunk app so only the admin user has access?

I have installed the S.o.S - Splunk on Splunk app. I want only the admin user to have access (view) to this app. I se...

by Path Finder in

Splunk App for NetApp Data ONTAP: Why am I getting a data collection "job_aggregate_execution_info" error?

I am getting the following error when I execute: index=_internal sourcetype=splunk_ta_ontap_api* OR sourcetype=hyd...

by Communicator in

DB Connect 2 automatic lookup fails in Search App (Hunk 6.2.4)

Hello Folks: Has anyone run into automatic lookup error with DB Connect 2 on Hunk 6.2.4? Surprisingly, it works f...

by Splunk Employee in

Office 365 Management Activity

Does the Office 365 data import app support Office 365 Management Activity that was released as a new feature for sec...

by Builder in

Cisco ios apps

I have installed cisco security suite apps. This apps does not seem to have good ios analysis capability. There is a ...

by Contributor in

Why is the Cisco Networks App for Splunk Enterprise not parsing data?

Maybe someone can help me with this. I followed the instructions and changed my sourcetype to syslog since I do not h...

by Explorer in

Why am I getting "Internal Server Error" trying to connect Splunk DB Connect 2 and a distributed database?

I have got Internal Server Error all day after I validated the connection. However, the connection has been too slow,...

by New Member in

Splunk for Juniper SA: Why am I getting error "Invalid key in stanza props.conf"?

Just started trying to get this to work in our Splunk instance after extracting the files into the Apps directory and...

by Communicator in

Why after adding the Splunk Web Analytics are all 'user' fields hexadecimal strings?

Before adding Splunk Web Analytics 'user' fields were exactly what's in the log files. After add Splunk Web Analytics...

by New Member in

Rest API Modular Input: Combining multiple REST URLs?

I am trying to pull volume data in from my VMAX array. I have about 200 volumes and I need a unique REST call for eac...

by Communicator in

How to analyze packet logs generated by Snort ?

I have some packet logs generated by Snort IDS, and I've forwarded them to Splunk Enterprise by using Universal Forwa...

by Engager in

Best practices for migrating an app we've created from one Splunk instance to another

<posted on behalf of a customer> I see there are app-packaging instructions on http://docs.splunk.com/Documentatio...

by SplunkTrust in

Okta App stopped working

It was brought to my attention that our Splunk for Okta app stopped pulling in data. We are running Splunk 6.2.2,...

by Explorer in

Default port udp/513

Is port udp/513 an absolute or is it just a matter of changing the stanza in the inputs.conf file? I run splunk as a ...

by Explorer in

Sideview Utils: Is it possible to make CheckboxPulldown render with none of the dynamic options selected instead of all?

I am running Sideview Utils 3.3.2 in Splunk 6.1.7 on Windows 2008r2. I have a dashboard where I use several chaine...

by Path Finder in

Splunk Add-On for Nessus: How to configure inputs.conf to keep the original file directory path as the source field when pulling .nessus files?

I am looking to pull my .nessus files through the spool directory, but I need to drop files in and keep their origina...

by New Member in

I'm running the Cisco Networks App and while it lists all devices by IP, it's not pulling device hostname, software images, models, etc. Any ideas why?

I'm running the Cisco Networks App and while it lists all devices by IP, it's not pulling device hostname, software i...

by New Member in

How to trigger alerts on value of a custom field

My results are like :- 200 423405 757168 846810 OK 201 5704 15009 11408 HIGH COUNT 206 17 14 34 OK 301 20646 3125...

by Path Finder in

Splunk Add-on for Amazon Web Services: aws_cloudtrail events are being written, but why are they not indexed?

I have been trying to troubleshoot an issue with aws_cloudtrail.py. Most of the time, the AWS message queue is proces...

by Path Finder in

Splunk App and Add-on for ServiceNow: How to get the correct names of the assignment_group and assigned_to for incidents?

Hi, I set up the app and add-on for ServiceNow (Fuji), but I still cannot get the right names for the assignment g...

by Contributor in

Why would alerts show in "KPI Report - Incident Status" report as long runners, but not show up on incident posture page?

Occasionally, alerts will fire that seem to get stuck and never make it into the Incident Posture dashboard. When I c...

by Path Finder in

REST API Modular Input: Why are Arabic characters not encoded properly?

Hi everyone, I'm using the REST API Modular Input to get data from a web page (php). The thing is that data is a ...

by Engager in

Not so much a question as a suggestion

I wasn't able to get Incident Setting to display any alerts after setting the script to alert_handler.py, and had a l...

by Contributor in

Get Updates on the Splunk Community!

All Apps and Add-ons

Discussions

Website Monitoring: Why am I getting "Fail: Client is not authorized to perform requested action." trying to create a new input?

Forwarding Data To Third Party, Hadoop Connect Issues

How to set permissions for the S.o.S - Splunk on Splunk app so only the admin user has access?

Splunk App for NetApp Data ONTAP: Why am I getting a data collection "job_aggregate_execution_info" error?

DB Connect 2 automatic lookup fails in Search App (Hunk 6.2.4)

Office 365 Management Activity

Cisco ios apps

Why is the Cisco Networks App for Splunk Enterprise not parsing data?

Why am I getting "Internal Server Error" trying to connect Splunk DB Connect 2 and a distributed database?

Splunk for Juniper SA: Why am I getting error "Invalid key in stanza props.conf"?

Why after adding the Splunk Web Analytics are all 'user' fields hexadecimal strings?

Rest API Modular Input: Combining multiple REST URLs?

How to analyze packet logs generated by Snort ?

Best practices for migrating an app we've created from one Splunk instance to another

Okta App stopped working

Default port udp/513

Sideview Utils: Is it possible to make CheckboxPulldown render with none of the dynamic options selected instead of all?

Splunk Add-On for Nessus: How to configure inputs.conf to keep the original file directory path as the source field when pulling .nessus files?

I'm running the Cisco Networks App and while it lists all devices by IP, it's not pulling device hostname, software images, models, etc. Any ideas why?

How to trigger alerts on value of a custom field

Splunk Add-on for Amazon Web Services: aws_cloudtrail events are being written, but why are they not indexed?

Splunk App and Add-on for ServiceNow: How to get the correct names of the assignment_group and assigned_to for incidents?

Why would alerts show in "KPI Report - Incident Status" report as long runners, but not show up on incident posture page?

REST API Modular Input: Why are Arabic characters not encoded properly?

Not so much a question as a suggestion

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Observability protocols to know about

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

Splunk Add-on fails Splunk cloud inspection test

Using learning with toolkit in splunk

DA-ITSI-CP-vmware-dashboards Quick Search Not work...

Where to check Endpoint Status from Symantec in Sp...

'Telegram Alert Action' Add on cannot send alert