Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About jadengoho
jadengoho
Builder
Member since:
08-31-2017
02-28-2022
Community Statistics
| Posts | 252 |
| Solutions | 10 |
| Karma Given | 6 |
| Karma Received | 26 |
| Member Since | 08-31-2017 |
Activity Feed
- Got Karma for Re: HEC {"text":"Token is required","code":2}. 03-30-2024 02:26 AM
- Got Karma for Re: Lookup Editor limit the revert backup. 01-25-2023 04:59 AM
- Posted Re: Add-on for MS Office 365 question on Getting Data In. 02-28-2022 07:04 PM
- Posted Splunk Add-on for 0365: Why am I receiving Invalid Token? on Monitoring Splunk. 02-27-2022 11:27 PM
- Posted Re: Credentials Encryption in bash script on Security. 12-16-2021 04:39 AM
- Posted Re: Credentials Encryption in bash script on Security. 12-16-2021 12:28 AM
- Posted Credentials Encryption in bash script on Security. 12-15-2021 11:12 PM
- Tagged Credentials Encryption in bash script on Security. 12-15-2021 11:12 PM
- Posted Missing date_* fields on Splunk Enterprise. 12-03-2021 01:58 AM
- Posted Re: WARN LineBreakingProcessor on Getting Data In. 11-24-2021 06:06 PM
- Posted WARN LineBreakingProcessor on Getting Data In. 11-24-2021 12:06 AM
- Got Karma for Re: Does the Splunk Enterprise Security license expire?. 07-29-2021 09:16 PM
- Got Karma for Re: Selected Fields are missing. 05-26-2021 06:38 AM
- Got Karma for Re: Prevent users from table sorting (when clicking on its headers). 04-07-2021 11:01 PM
- Got Karma for Re: Splunk Searches delayed. 03-26-2021 09:14 AM
- Posted Re: Netskope Backend Error on Splunk Enterprise. 02-28-2021 09:28 PM
- Posted Splunk High Utilization on Splunk Enterprise. 02-24-2021 03:25 AM
- Tagged Splunk High Utilization on Splunk Enterprise. 02-24-2021 03:25 AM
- Posted Netskope Backend Error on Splunk Enterprise. 02-22-2021 12:56 AM
- Got Karma for Re: SPL on configuration files. 02-16-2021 01:24 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-21-2018
11:46 PM
I did restart and this is what is see:
Splunk> The Notorious B.I.G. D.A.T.A.
Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open
Checking configuration... Done.
Checking critical directories... Done
Checking indexes...
Validated: _audit _internal _introspection _telemetry _
Done
Bypassing local license checks since this instance is configured with a remote license master.
Checking filesystem compatibility... Done
Checking conf files for problems...
Done
Checking default conf files for edits...
Validating installed files against hashes from '/opt/splunk/splunk-7.0.0-c8a78efdd40f-linux-2.6-x86_64-manifest'
All installed files intact.
Done
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
Done
[ OK ]
Waiting for web server at https://127.0.0.1:8000 to be available... Done
If you get stuck, we're here to help.
Look for answers here: http://docs.splunk.com
The Splunk web interface is at https://<hostname>:8000
But, as i mention . previous team set it in 2 diffrent network :
10.80.246.100 - internal ip
10.80.243.32 - is the web (this is given by the previous splunk team)
now the restart shows :"8000" , - ERROR page
https://:8000 - Error page ,
[Is there a way i can see what address/network is the UI of the new install app displaying ?
... View more
05-21-2018
10:14 PM
there is no error description on it , it's just a red icon ( that i guess its a error) . and it doesnt deploy to my intended client ,
its just a blank app , i just put the conf inside (splunk/etc/system/local)
... View more
05-21-2018
09:03 PM
Hi ,
I am having this error
I am trying to create an app where i will insert thee transforms, props configuration files, and will be sent to Cluster master > indexer ,
It is because we don't have direct access to indexer that's why we're doing this way.
Would anyone know why this is happening ? or what is the best solution in my situation .
Thanks in advance.
... View more
05-21-2018
07:11 PM
I installed a new Splunk enterprise in the box ,
We are using a cluster environment , and we have 2 different IP address .
Example : 10.80.246.100 - internal ip
10.80.243.32 - is the web (this is given by the previous splunk team)
Is there a way i can find the web ui address of the splunk ?
I already tried web.conf = 127.0..0.1:8089 ( just showing splunkd)
... View more
05-20-2018
05:13 PM
would this apply in a data model ?
... View more
05-20-2018
05:10 PM
Here is the situation :
I have a dashboard with 20 panels, each panel do different things.
- it must get the 24hrs worth of data (12,000+ data per 24hrs)
- It must be in real time( every 5-30 seconds if possible) since it was using a time chart
- must work smoothly as possible
Now here's my concern:
- If I use a data model + acceleration/ summary indexing: would it gather new data less than a minute ago?
Why did i use outputcsv ?
- I create a saved search that outputcsv file every minute ( that the shortest chron I think ), I kind of lost of option that why I choose it.
What is the best way to handle this kind of situation?
... View more
05-17-2018
09:45 PM
As i can see in this documentation
http://docs.splunk.com/Documentation/Splunk/7.1.0/AdvancedDev/Whatsinthismanual#Advanced_XML_Deprecation
Splunk Advance XML is no longer available
Is there any way i can insert this code ?
<module name="Search" layoutPanel="panel_row1_col1" group="Group Name">
<param name="search">search goes here</param>
<module name="ExcelExport"/>
</module>
from this source : https://answers.splunk.com/answers/51517/configuration-for-splunk-for-excel-export-ap.html?utm_source=typeahead&utm_medium=newquestion&utm_campaign=no_votes_sort_relev
Or is there any other way i can export a table into a excel form ,
... View more
- Tags:
- splunk-enterprise
05-16-2018
07:13 PM
I am trying to create a dashboard in realtime , a savedsearch that ouputcsv then used that in the dashboard (20panel)
currently i have a search(4hrs) that outputcsv but not in REALTIME, would it be possible to outputcsv in a realtime search.
If not , what would be the easier way ?
... View more
05-15-2018
06:57 PM
I see this : https://answers.splunk.com/answers/329479/is-there-a-way-for-one-calculated-field-to-pull-da.html#answer-330049
but its way back 2015 , does new splunk can do this now ?
... View more
05-15-2018
06:46 PM
I am trying to create a new field using the regex i create.
I created a regex first in the first level
now how can i use that regex /calculated field in a eval expression ?
... View more
05-11-2018
12:14 AM
I am new in to Salesforce thing , and i am getting this error:
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_object.py" GlobalConfigError: Config Not Found for Input, input_type=sfdc_object, input_name=salesforce_trial, config_type=account, config_name
What Input is this referring for ?
What does it trigger ?
And possible how to solve this ?
... View more
05-10-2018
04:15 PM
Yes i think so , Cause it's a secured network and some port/address are not allowed to be access. Thanks for the answerr 🙂
... View more
05-10-2018
02:25 AM
thank you very much , let me do the "tcpdump" and "snmpwalk " to check what is the real problem, Thanks:)
... View more
05-10-2018
02:09 AM
can you tell me how to do the "tcpdump "?
... View more
05-10-2018
01:43 AM
could you tell me the process on how you do the custom script ? If possible can you post the script itself here ?
... View more
05-09-2018
11:07 PM
Now im getting more of this message :
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" No SNMP response received before timeout snmp_stanza:snmp://testingpolling_2
... View more
05-09-2018
07:53 PM
Just want to ask why did I get this error using SNMP modular input? Or how can I solve this?
I am trying to poll the data.
Does it really don't get data or an error on my configuration on testing polling_*
5/9/18 10:19:04.989 PM 05-09-2018 22:19:04.989 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" SNMP message serialization error snmp_stanza:snmp://testingpolling_1
• host = splunk_hf1
• source = /opt/splunk/var/log/splunk/splunkd.log
• sourcetype = splunkd
05-09-2018 22:18:01.756 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" No SNMP response received before timeout snmp_stanza:snmp://testingpolling_2
5/9/18 10:18:04.891 PM 05-09-2018 22:18:04.891 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" SNMP message serialization error snmp_stanza:snmp://testingpolling_2
• host = splunk_hf1
• source = /opt/splunk/var/log/splunk/splunkd.log
• sourcetype = splunkd
... View more
05-09-2018
03:30 AM
i mistakenly input MATRIXX-SMI.py in MIB (snmp manager) but change it to just "MATRIXX-SMI"
But still getting this error ,
MIB file "MATRIXX-SMI.py.py[co]" not found in search path
And yes i put the make a .egg file and put on the /snmp_ta/bin/mibs
... View more
05-09-2018
12:32 AM
HI Everyone,
just want to know why i dont get any data from snmp_ta
heere is my splunkd.log
5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Traceback (most recent call last):
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 771, in <module>
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" do_run()
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 475, in do_run
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" mibBuilder.loadModules(*mib_names_args)
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 270, in loadModules
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18 3:20:33.908 A 05-09-2018 03:20:33.908 -0400
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" pysnmp.smi.error.SmiError: MIB file "MATRIXX-SMI.py.py[co]" not found in search path
Did i miss something , its same like this one :
https://answers.splunk.com/answers/123794/snmp-modular-input-mib-file-not-found-in-path.html
but no image indicated below i cant see it , so i cant really resolve this problem.
... View more
05-09-2018
12:13 AM
i am getting this log
index=_internal ExecProcessor error snmp.py host="HF1
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Traceback (most recent call last):
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 771, in <module>
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" do_run()
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 475, in do_run
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" mibBuilder.loadModules(*mib_names_args)
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 270, in loadModules
host = prd-usc1-a-splunk-hf1 source = /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18
3:11:58.976 AM
05-09-2018 03:11:58.976 -0400 ERROR ExecProcessor - message from "python /opt/spl
... View more
05-09-2018
12:09 AM
Did you solve this problem ?
and can you relink the image i cant see it .
You most likely haven't declared your MIB name properly in your setup stanza.
So if you have FOO.MIB and you generate FOO.py and you put FOO.py in the snmp_ta/bin/mibs directory , then this is what the MIB Names field should look like in your setup :
alt text
... View more
05-08-2018
08:41 PM
i try to install i tto the Heavy forwarder with python 2.7 but still no data incomming
... View more
05-08-2018
08:31 PM
Hi i am having difficulties on doing this one ,
can someone tell me what should i need to do to make it fix .
As i can see it's finding a module , where i can put that module what location ?
... View more
- Tags:
- splunk-enterprise
05-08-2018
04:42 PM
Hi jay_chow , so you solve this problema , if yes can you tell us how or what is the process you do ?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-28-2022
11:18 PM
|
