This is on a forwarder. We have two forwarders receiving syslog from some appliances. The forwarders write the syslog to disk and then the Splunk forwarder monitors for the files. The input s...
I am trying to set-up LDAP authentication. But not able to proceed with below error when adding new LDAP strategy.
Infra teams confirm on the correctness of the userBaseDN. Need help
E...
Hello, I have a text source file with header. Some sample events (first line is a header) and props that I wrote given below. My props is working ok, except it breaks the events at TEST\2qw123|E...
Hi Last week one of our vulnerability scan found out that our universal forwarders were suspectable to TLS CRIME vulnerability. To fix this vulnerability we updated our server configurationfile (t...
...ersa). I realize this can be done pretty easily through the GUI though normally the configuration is handled centrally.
Having come up empty looking through the content of the app/package, is it p...
...he event breaking point is marked as Bold and I used LINE_BREAKER=([\r\n]*)\{"eventVer":" in my prop.conf file, but not parsing all events as expected. Any recommendations will be highly a...
...ould not find userBaseDN on the LDAP server: ou=Active Staff,ou=People,dc=mydomain,dc=edu"
After lots of debugging the ldap search it uses during the base configurationuses "Attributes 1.1" for LDAP...