Getting Data In

TrackMe - Remote Deployment Account - SplunkCloud

aavyu20
Engager

Dear Splunk Community, 

I am here seeking your thoughts and suggestions on the error I am facing with TrackMe 

ERROR search_command.py _report_unexpected_error 1013 Exception at "/opt/splunk/etc/apps/trackme/bin/splunkremotesearch.py", line 501 : This TrackMe deployment is running in Free limited edition and you have reached the maximum number of 1 remote deployment, only the first remote account (local) can be used

Background:

Objective - Setup TrackMe monitoring (a virtual tenant - dsm, dhm & mhm) for our remote Splunk deployment (SplunkCloud).

TrackMe app is installed on our on-prem splunk instance and added  "Splunk targets URL and port" under Configuration --> Remote deployments accounts (only one account)

No issues with the connectivity, it is successful (pic below

aavyu20_0-1709828852675.png

We are using free license and as per trackme documentation, allowed to use 1 remote deployment.

Could we use free license in our case or how to get rid off 'local' deployment? Please suggest. 

 

Labels (1)
0 Karma

tscroggins
Champion

Hi @aavyu20,

I recommend contacting TrackMe support directly. Their contact information is available on the TrackMe Splunkbase page.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...