All Apps and Add-ons

Start a Conversation

Discussions

Start a Conversation

Thread Info

Local Admin

Hi, If a user is added as local admin and also local admin group. What's the difference and is there any security r...

by New Member in

Proofpoint TAP Modular Input App: Autologin succeeded, but there was an auth error on next request. Something is very wr

I'm facing issue setting up modular input for Proofpoint TAP. splunkd.log: INFO ModularInputs - Autologin...

by Path Finder in

how to decode mime header coming in event in cisco-esa mail logs?

sample event : Thu Jan 21 14:45:07 2018 Info: MID 252525 Subject '=?windows-874?B?IFl1YW50YSBSZXNlYXJjaCi6t8fU4KTD0tD...

by Explorer in

Getwatchlist: curl command timing out in Splunk Cloud

Hi there. Our Security team requested this app, so we'd like to give it a try. We're in Splunk Cloud (managed, mul...

by Communicator in

Upgraded Splunk DB Connect V3.2.0 to V3.3.0 seeing metrics-logger-reporter errors

Hi, I upgraded Splunk DB Connect from V3.2.0 to V3.3.0 and now see lots of errors like this. Anyone know what this...

by New Member in

How to remove sourcetype monitoring from TrackMe?

Hi, I've installed the TrackMe app in my Splunk Cloud environment. It's automatically discovered my environment, i...

by Observer in

Cisco Firepower eStreamer eNcore Add-on for Splunk version 4 Install

I know this version is still in beta, I personally had a lot of issues getting it to install properly. In case it wou...

by Path Finder in

Splunk Machine Learning Tool kit: Error in 'fit' command: External search command exited unexpectedly.

Hello, I just installed the ML toolkit for Splunk and am running into the below error every time I go to the showc...

by Explorer in

Palo Alto Networks Add On (6.3.1) not parsing globalprotect logs after 9.1.4 upgrade

We swapped firewalls running version 8.1.15 and GP 4.1.12 to a replacement running version 9.1.4 and GP 4.1.12. Pri...

by Engager in

Certificate error with SailPoint Adaptive Response app

Hi Splunkers! We have installed the SailPoint Adaptive Response app on a heavy forwarder but when setting up the in...

by Observer in

Palo Alto Networks Add-on Install Locations

If I have the add-on installed on my heavy forwarder and search heads, is there any need to install it on my indexers...

by Explorer in

How can automatic update checking be disabled for Splunkbase apps?

Due to my environment's proxy and firewall setup, we cannot have automatic update checks occurring for Splunkbase app...

by Splunk Employee in

How do I CIM tag SQL server audit logs read by the DB Connect application?

This is actually a question I already the answer for, I just want to use the question/answer style to ensure it compl...

by SplunkTrust in

Splunk addon builder checkpoint

Splunk add-on builder gives us 2 options to save checkpoint File Auto File type save checkpoints t...

by Motivator in

Splunk_TA_checkpoint-opseclea: Error during cert pull

Hi, we lost hours trying to pull certificate with a generic error: 2020-09-17 08:09:43,692 +0000 log_le...

by Path Finder in

TA-dmarc add-on version 3.2.1: Unable to add data to index with stable connection and add-on is reading messages.

Hi, We are using the latest version for TA-dmarc add-on for Splunk (3.2.1). Connection seems to be successful and ...

by Contributor in

Splunk Add-on for Check Point OPSEC LEA: Why am I unable to gather Check Point logs from LEA Server using OPSEC 4.1

After recently configuring the Splunk Add-on for Check Point OPSEC LEA, I'm finding these errors reported in my splun...

by Splunk Employee in

Unable to connect splunk to hive using db connect 3.4.0

I have installed Cloudera_HiveJDBC4_2.5.6.1008 driver for Hive from the Cloudera website 1. I have placed the follo...

by Explorer in

SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:676) when trying to use add-on.

I have this add-on installed on a HFW, just installed the 0Gb ingestion license (to allow KVStore to run) but I am no...

by SplunkTrust in

SAI doesn't show any alert in Alerts tab

We have SAI installed on a Searchhead (SH), and Add-ons are installed on a Indexer (IDX) and a HeavyForwarder (HF) in...

by Engager in

All Apps and Add-ons

Discussions

Local Admin

Proofpoint TAP Modular Input App: Autologin succeeded, but there was an auth error on next request. Something is very wr

how to decode mime header coming in event in cisco-esa mail logs?

Getwatchlist: curl command timing out in Splunk Cloud

Upgraded Splunk DB Connect V3.2.0 to V3.3.0 seeing metrics-logger-reporter errors

How to remove sourcetype monitoring from TrackMe?

Cisco Firepower eStreamer eNcore Add-on for Splunk version 4 Install

Splunk Machine Learning Tool kit: Error in 'fit' command: External search command exited unexpectedly.

Palo Alto Networks Add On (6.3.1) not parsing globalprotect logs after 9.1.4 upgrade

Certificate error with SailPoint Adaptive Response app

Palo Alto Networks Add-on Install Locations

How can automatic update checking be disabled for Splunkbase apps?

How do I CIM tag SQL server audit logs read by the DB Connect application?

Splunk addon builder checkpoint

Splunk_TA_checkpoint-opseclea: Error during cert pull

TA-dmarc add-on version 3.2.1: Unable to add data to index with stable connection and add-on is reading messages.

Splunk Add-on for Check Point OPSEC LEA: Why am I unable to gather Check Point logs from LEA Server using OPSEC 4.1

Unable to connect splunk to hive using db connect 3.4.0

SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:676) when trying to use add-on.

SAI doesn't show any alert in Alerts tab

Local Admin

Proofpoint TAP Modular Input App: Autologin succee...

Splunk_TA_checkpoint-opseclea: Error during cert p...

How to integrate 2 FMCs in distributed Splunk

Splunk Add-on for MySQL false description