Hi @gcusello , I'm getting no results when I run any queries in splunk. The following error I'm getting.Can you please help me in this? Distributed: Unable to distribute to peer named X.X.X.X:8089 at uri=X.X.X.X:8089 using the uri-scheme=https because peer has status=2. Please verify uri-scheme, connectivity to the search peer, that the search peer is up, and an adequate level of system resources are available. See the Troubleshooting Manual for more information. Regards, Rahul Gupta ... View more

Hi @gcusello , I want to check if in our environment splunk receives data/logs into azure firewall. if it doesn't receives is there a way we can ingest data into azure firewall. Can you please guide us how to check above query? Regards, Rahul ... View more

Hi , How do I fetch the raw logs for the source type :wms_oracle_sessions? Query: index=main sourcetype=wms_oracle_sessions | bucket span=5m _time | stats count AS sessions by _time,warehouse,machine,program | search warehouse=ew | stats sum(sessions) AS psessions by _time,program | timechart avg(psessions) by program Thank you very much. Regards, Rahul ... View more

Hi @gcusello , How to upload splunk diag files into the case. Regards, Rahul ... View more

Hi All, I unable to select Rising column parameter from the following SQL Query.Can someone please help me with this. select * from (select to_char(count(1)) as "sessions" from v\\$session), (select to_char(count(1)) as "processes" from v\\$process), (select value as "max_sessions" from v\\$parameter where NAME='sessions'), (select value as "max_processes" from v\\$parameter where NAME='processes'), (select to_number(substr(output, 33),9999999.99) avg_ash from table(dbms_workload_repository.ash_report_text( (select dbid from v\\$database), 1, sysdate - interval '5' minute, sysdate, 0)) where output like '%Average Active Sessions%') Regards, Rahul ... View more

Hi @gcusello , Recently I faced one issue that my old query use to work but now it no longer working. Old Query: |dbquery wmsewprd "select * from sys_code_type where rec_type='C'" What we are witnessing now is that the above query is working only when we are explicitly using the schema name(wmsew) along with the table name(sys_code_type) as below. New Query: |dbquery wmsewprd "select * from wmsew.sys_code_type where rec_type='C'" So I contacted Splunk support and they advised me to use dbxquery instead of dbquery so in-order to do that what  asked me to migrate the  search that uses the "dbquery" command to use "dbxquery" instead. So can you please guide me how to migrate from dbquery to dbxquery. Regards, Rahul   ... View more

Hi All, We got a requirement that we need to remove panel from dashboard.Can anyone guide me how this could be achieved. We want to remove WK: Oracle Sessions By Program from the dashboard.Please help. Regards, Rahul ... View more

Hi All, Can someone advice what is wrong with this  following query. |dbquery wmsewprd "select * from sys_code_type where rec_type='C'" when I run this ,I get an error.   But when I use wmsew.sys_code_type instead of sys_code_type I get the exact output.Can any help me this.Our requirement is to work |dbquery wmsewprd "select * from sys_code_type where rec_type='C'" . wmsewprd -- External Database. Regards, Rahul ... View more

Hi , I am trying to troubleshoot the splunk Add-on for Microsoft Cloud Services.I checked at the following location but could not get any data. Checkpoint Directories Azure Storage Blob $SPLUNK_HOME/var/lib/splunk/modinputs/mscs_storage_blob   Azure blob storage: If you can't get data, check that you are using the correct Account Name and Account Secret. Use the query in the preceding table to check for errors. If you have no errors and cannot collect data, remove the checkpoint file and try again. And I believe I have provided the correct Account name and Account Secret. Please advice why I am unable to get the data? Regards, Rahul ... View more

Hi @gcusello , Need your help on this,trying to configure Azure Storage Blob Modular Input for Splunk Add-on for Microsoft Cloud Services and it seems that I have configured it properly but unfortunately nothing reflecting in splunk. As I have created index and sourcetype. Following is  the below documentation that I am refering. https://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/Configureinputs5 Please help, Regards, Rahul  ... View more

Hi , I am trying to connect Azure Storage account with the Splunk Add-on for Microsoft Cloud Services following the below Url. https://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/Configureazurestorageaccount How to check if it is connected successfully? Regards, Rahul ... View more

Hi All,   When I am trying to run the following search in splunk:   |dbquery wmsqlprd "select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID from SYS_CODE_TYPE" it is throwing an error A database error occurred: ORA-00942: table or view does not exist.     But when I try to run with the same saerch with wmsql.sys_code_type it is giving result.   |dbquery wmsqlprd "select REC_TYPE, CODE_TYPE, CODE_DESC, SHORT_DESC, USER_ID from wmsql.SYS_CODE_TYPE" .    what needs to be done to get results using the first query.   Regards, Rahul Gupta ... View more