- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- netflow Analytics for splunk in search head cluste...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the Netflow Analytics for splunk app does not seem to be replicating config accross the SHC. I have to go to each SH in the cluster to "enable" the app from the settings page. Also, some configuration changes I made to the visualizations dont seem to be replicating to the other SH's. I dont see any reference to search head clustering in the Netflow docs either. Is this expected behavior?
app version 3.7.81
splunk version 7.0.2
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
NetFlow Logic removed “enable” button in App version 3.8.8, so I suggest to upgrade to the latest version.
some configuration changes I made to the visualizations dont seem to be replicating to the other SH's.
What kind of visualization changes were made?
Please note that in the latest version of the App the menu was made editable by placing your changes in …/local folder (in v3.7.81 the menu was built dynamically based on config options)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
NetFlow Logic removed “enable” button in App version 3.8.8, so I suggest to upgrade to the latest version.
some configuration changes I made to the visualizations dont seem to be replicating to the other SH's.
What kind of visualization changes were made?
Please note that in the latest version of the App the menu was made editable by placing your changes in …/local folder (in v3.7.81 the menu was built dynamically based on config options)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I upgrade the app and that did solve my issue. Thanks for the feedback
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi there,
Can you tell me how did you deploy this app to your search heads. Using a deployer or manually installing it on each search head.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
