The recently released Tech Add-On does not have the restart functionality and should work for you: https://splunkbase.splunk.com/app/3457/ Along with the dashboard App: https://splunkbase.splunk.com/app/3492/ Jonathan (Rapid7) ... View more

Wow, it makes sense looking at it now but I was trying to work within the entire variable. I appreciate the assist. ... View more

We have certified the application against Splunk 6.3 for both upgrades and fresh installs. This covers both Nexpose and UserInsight functionality. If you are having an issue with your install then please contact Rapid7 Integrations Support at integrations_support [at] rapid7 [dot] com and a representative from support will assist you in resolving this issue. ... View more

How to refer to a separate index instead of using the default index "main"? I have added the following in the "inputs.conf" index = rapid7 The Splunk was restarted but it seems no event logged in the new index. Moreover, will the Nexpose dashboard refer all data from the new index? Any customisation would be needed on the dashboard layer? Thanks. Kelvin ... View more

The Rapid7 application utilises the Splunk Web Framework. This is integrated into Splunk 6 only but is available in a stand-alone version for Splunk 5. Details here. Officially the Rapid7 Application for Splunk only supports Splunk 6.0 and higher but assuming the standalone Web Framework is installed in Splunk 5, the application should work. Short answer: No. Long Answer: Yes (but unofficially and without support). ... View more

How did you end up solving this issue? would be really great if you posted it. ... View more