Splunk Enterprise

Splunk Security Essentials issues

domino30
Path Finder

So we rebuilt out SHs aby completely blowing them out and started with a fresh 9.1.01 install.

Then just for kicks before making a SH  Cluster I installed the Splunk Security Essentials on one of the SHs

and The app worked wonderfully but when I made it part of a cluster It gave  errors I am attaching a snipits of both so you can see. Keep in mind that all that was changed was that I put the SH into  a cluster and then got the errors.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

You don't do that. As a rule, you install a clean SH and join it to the cluster. You don't fiddle around installing local apps. All config is supposed to be managed within the SHC.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...