Splunk Fish Bucket indicating Virus

[indra_wijaya]

Hi Guys,

I have a problem related to Splunk Fishbucket..
When I run my full scan on Splunk server, it found a Trojan on the fishbucket folder.
C:\Program Files\Splunk\var\lib\splunk\fishbucket\4069420869.tmp

Any idea why this is indicated as a Virus?

[indra_wijaya]

Hi adamw,

Thank you for your reply.. So this is just a false positive alert.. I see then.. Thank you for your response..

[adamw · Accepted solution]

It's likely there used to be a virus with a similar file name, ending in tmp. Some AV programs trigger on any tmp file not actually in the Windows tmp/temp folder, but this is likely a false positive.