I have the Splunk app for active directory (1.1.4) installed and it is working. However it would be good if I was able to send (email) reports periodically to security/AD people. Just for example: is it possible to send a report once a week detailing all changes made to any objects in a particular OU? I have noticed an "action" of "Schedule PDF Delivery..." on a couple of the dashboards, but when I click on it I receive this message: "PDF generation isn't supported on this platform". I have Splunk 5.0.2 installed on a windows server. Thank you. ... View more

I have Splunk for Cisco Firewalls app v2.0 installed. It is generating some warning messages in the logs: WARN SearchOperator:kv - Invalid key-value parser, ignoring it, transform_name='ciscosyslog-src_dom_addr_port_2'; WARN SearchOperator:kv - Invalid key-value parser, ignoring it, transform_name='ciscosyslog-dst_dom_addr_port_2'; and WARN SearchOperator:kv - Invalid key-value parser, ignoring it, transform_name='product_static_IDS'. Are there any samples of stanzas (or example transforms.conf) for these transforms? ... View more

I recently updated Cisco Firewalls and Cisco IPS apps to the latest versions (2.0 and 2.0.0). Now when I perform a search I receive errors similar to this: "The lookup table 'err_code_lookup' does not exist. It is referenced by configuration 'diff text here'." From some investigating, it looks like it is looking for a non-existing file. I appreciate any help on how to obtain this file or fix this error. Thanks. ... View more