The documentation for this add-on says using a deployment server isn't supported. https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Install#Distributed_deployment_feature_compatibility What happens when you install it directly on your heavy forwarder instead? ... View more

The Splunk Add-on for Microsoft IIS doesn't contain any views and isn't meant to be a visible app in your app sidebar. The behavior you are describing happens when someone has set Visible to True by accident for that app. To turn off visibility: Go to Apps > Manage Apps. Find the row for the add-on you are working with and click Edit properties. Under Visible, choose No, then click Save. ... View more

The ServiceNow alert actions should already be available to be triggered as adaptive response actions from correlation searches, provided that the permissions are set correctly so that the ServiceNow alert actions are available to all apps. However, in order to get them to appear as an option as an ad-hoc adaptive response from the Incident Review dashboard, you'll need the param._cam, which you can add on your own instance: Follow the docs to do this here: http://dev.splunk.com/view/enterprise-security/SP-CAAAFBG ... View more

Thank you for reporting this. There was an issue with display of our static pages. The issue has now been fixed and you should be able to access these pages again. ... View more

What version of Splunk platform are you using, and are you running this on Splunk Enterprise or Splunk Cloud? ... View more

Most Splunk-built add-ons will not define indexes for you and will route to main by default unless you define a custom index. Some older add-ons are exceptions to this rule and their indexes.conf files are still included for backwards compatibility. Best practice is to let the admin make their own decisions about index naming conventions, retention settings, etc. ... View more

I don't believe Splunk Enterprise is supported on Windows 8 per http://docs.splunk.com/Documentation/Splunk/7.1.2/Installation/Systemrequirements#Windows_operating_systems It looks like compatibility with Windows 8.1 is deprecated but still supported on a trial or free installation. Maybe you could try that? ... View more

The Splunk Add-on for McAfee collects some data via syslog: https://splunkbase.splunk.com/app/1819/#/overview Docs for the source types this add-on collects: http://docs.splunk.com/Documentation/AddOns/released/McAfeeEPO/DataTypes Docs for configuring the syslog input: http://docs.splunk.com/Documentation/AddOns/released/McAfeeEPO/ConfigureSyslogInput ... View more

Per the documentation, the add-on supports only Linux for your data collection node. http://docs.splunk.com/Documentation/AddOns/released/Box/Hardwareandsoftwarerequirements ... View more

Same add-on, new name! The Splunk Add-on for Tenable is the new name; Splunk Add-on for Nessus is the old name, and the folder name of the TA (and the documentation URL) still calls it Nessus as well. Follow the docs for setup instructions: http://docs.splunk.com/Documentation/AddOns/released/Nessus/Installationsteps ... View more

The setup documentation can be found here: http://docs.splunk.com/Documentation/AddOns/released/UnixLinux/Installationoverview ... View more

That's in service_now.conf. Details here: http://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Setuptheadd-on#Set_up_the_add-on_using_the_configuration_file ... View more

In that case, you can build your own integrations using Add-on Builder. https://splunkbase.splunk.com/app/2962/ ... View more

Do you have the Splunk Add-on for Kafka installed on the heavy forwarder where you are doing those steps? ... View more

Yes, http://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/Install says that this add-on requires a heavy forwarder for data collection. Connect that heavy forwarder to your Splunk Cloud environment by installing the Splunk Universal Forwarder Credentials package on it. Despite the name of the package, it is needed for forwarders of any type that need to send data to Splunk Cloud. ... View more