All Apps and Add-ons

fire brigade 2 issues

a212830
Champion

Hi,

I installed fire brigade 2 and the ta on a search-head, running Splunk 6. Very little data is appearing - the host drop-down is always empty, and the index drop-down has a message under it that says "Could not create search". Is there something else that needs to be done?

Tags (1)
0 Karma

ppablo
Retired

FYI, Fire Brigade version 2 will no longer be updated (latest version is 2.0.3). The newer versions 2.0.4 and higher will now be available with the original “Fire Brigade” app on Splunkbase which was just updated to support Splunk 6.3. This is noted on the page for Fire Brigade on Splunkbase:
https://splunkbase.splunk.com/app/1581/

If you have any questions, ping the developer of the app @sowings

Cheers!

0 Karma

ckurtz
Path Finder

The TA will have 2 saved searches, you can use the S&R manager to make sure these are firing, and run them manually to test. In fact, you might want to lift them from the saved search and run them manually on the searchbar just to make sure they are producing the expected output.

Regarding the host menu and index dropdown, those are tied to a separate saved search in the main Fire Brigade App...you can also test/manually run this search to populate that dropdown.

0 Karma
Get Updates on the Splunk Community!

New Case Study: How LSU’s Student-Powered SOCs and Splunk Are Shaping the Future of ...

Louisiana State University (LSU) is shaping the next generation of cybersecurity professionals through its ...

Splunk and Fraud

Join us on November 13 at 11 am PT / 2 pm ET!Join us for an insightful webinar where we delve into the ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...