About lqiao2

lqiao2 · ‎09-19-2019

Hi, I see this add-on version 4.0.5 is only compatible with Splunk 7.2. So I would like if it is compatible with 7.3 and ES 5.3. Thank you.

lqiao2 · ‎08-14-2019

The S3 Secret is shown clear text on the Splunk Collection node, is there a plan to hash it with this add-on? Thank you.

lqiao2 · ‎01-11-2019

Thanks. Leveraging Splunk Support to exchange our contact information. Hang on there!

lqiao2 · ‎01-10-2019

Hi Stephen, it sounds to me that you made it work in your environment? Not sure if you are actively use it. If so, what would be your suggestions to make this app work? I want to use it to monitor our Veeam Backup status. Thanks.

lqiao2 · ‎10-31-2018

Hi, I am checking the demo for app Cisco Nexus 9k for Splunk Enterprise on Splunk Enterprise 7.x and find out that one of the dashboards is broken. The name of the dashboard is “Network Topology” under the Inventory menu. Does anyone have the same issue and know what is going wrong there? Just some information that I found out. This dashboard uses simple XML extensions. And I think that it is using Django Bindings which has been deprecated since 6.3. Thank you very much!

lqiao2 · ‎10-22-2018

Hi, splunk edit monitor CLI edits monitored directory inputs. The input in the Splunk Add-on for Microsoft Office 365 is a modular input, not a monitor input. So you can not use splunk edit monitor to disable it. To disable it, there are three ways: 1. you can open the inputs.conf and put disabled=1 under the stanza 2. go to the Web UI -> Settings - Data Inputs -> Microsoft Office 365 Message Trace -> Disable 3. go to the Web UI then go to the Microsoft Office 365 Reporting Add-on for Splunk -> Inputs -> Action -> Disable Hope it helps.

lqiao2 · ‎09-14-2018

Hey, I had the same issue and followed @SK8 's suggestion. It works. Here is what I did: 1. created /opt/splunk/etc/apps/wordcloud_app/README/savedsearches.conf.spec 2. entered below contents: [] display.visualizations.custom.wordcloud_app.wordcloud.useColors = display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode = display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor = display.visualizations.custom.wordcloud_app.wordcloud.colorBy = display.visualizations.custom.wordcloud_app.wordcloud.colorMode = display.visualizations.custom.wordcloud_app.wordcloud.numOfBins = display.visualizations.custom.wordcloud_app.wordcloud.minColor = display.visualizations.custom.wordcloud_app.wordcloud.maxColor = display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic = 3. restart splunk

lqiao2 · ‎09-11-2018

I answered this question by myself. While debugging the Python scripts of this add-on, I found out that there is a protocol mismatch between "collect.py" and "utils/nxapi_utils.py". In the "collect.py", the URL is with HTTPS. But the "nxapi_utils.py" uses "RespFetcher", which is coded HTTP. So if you align these two scripts, it should work. I switched to HTTP in "collect.py" and I can see data is coming to Splunk. HTTPS doesn't work for me at the moment as it is not yet configured on the switch side. Hope it helps.

lqiao2 · ‎09-05-2018

Hi, I installed and configured Cisco Nexus 9k Add-on. However, I got an error like this: Nexus Error: Not able to Execute command through NXAPI: init() got an unexpected keyword argument ‘context’, DEVICE IP: xxxx.xxx.xx.xxx. COMMAND: show version Has anyone experienced this? If so, can you please share the resolution? One possible reason that I can think of is that this add-on issues NX-API call with https while on the switch' side, it is http, right? Can this add-on provides the option to choose whether http or https? Changing the code in collect.py is not very nice. Thanks in advance.

lqiao2 · ‎08-28-2018

I think also that setting sourcetype = syslog is the right solution and make sure that the Cisco Network Add-on is installed on the indexers/search-heads.

lqiao2 · ‎05-10-2018

Thanks for your answer. I don't understand why Splunk wants to do this. But this really affects the outlook for all the existing apps, creating confusion!

lqiao2 · ‎05-10-2018

This is a good question. I am seeing the same as you. I did some research but haven't found a solution. Did you figure out?

Posts	12
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎05-04-2018

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Is the Recorded Future Add-on for Splunk ES 4.0.5 ...

Hash s3 secret

Network Topology Dashboard Doesn't Display In App ...

Cisco Nexus 9k Add-on: collect.py ERROR: init(...

Is the Recorded Future Add-on for Splunk ES 4.0.5 ...

Hash s3 secret

Re: Veeam Backup TA

Re: Veeam Backup TA

Network Topology Dashboard Doesn't Display In App ...

Re: How do I disable monitor input?

Re: Wordcloud Custom Visualization : Stanza errors

Re: Cisco Nexus 9k Add-on: collect.py ERROR: __ini...

Cisco Nexus 9k Add-on: collect.py ERROR: init(...

Re: Events not breaking at timestamp - Cisco Netwo...

Re: default.xml color option in Splunk 7.1 differe...

Re: default.xml color option in Splunk 7.1 differe...