Hi Everyone, I want to add few conf files in Managed Splunk Cloud app. Is it possible with out Splunk support to vet the app and deploy in Splunk Cloud? Thanks in Advance.         ... View more

Hi, Is it possible to create Indexed-Fields with the help of  collect Command from the splunk  search ?   ... View more

Hi Everyone, We are using do-nut visualization in Splunk Dashboard. But we are getting this error  "Error rendering donut visualization"  before loading this Viz. In the Splunk Base documentation mentioned about this issue is it will get if  you   are running on Safari v11.0+  But in our case we are using Google Chrome. Link: https://splunkbase.splunk.com/app/3150/#/details Please help us to resolve this issue. Thanks & Regards, Manikanth   ... View more

Hi Everyone, I am looking for writing tstats sub search in query in tstats where claus. I tried the below way but my query giving No Result. I want write in sub search with tstats from two indexes. Query:   | tstats latest(_time),values( relational_correlationId), values(tracePoint),values( timestamp),values(businessKey) ,values(businessValue)  where [  tstats latest(_time) as _time ,values(relational_ correlationId) as relational_correlationId ,values(tracePoint) as tracePoint,values(timestamp) as timestamp,values(content. businessFields{}.key) as businessKey,values(content. businessFields{}.value) as businessValue where index="mulesoft_index" earliest=-10m@m latest=now() by environment,businessGroup, appName,interfaceName, correlationId]   Please help me. Thanks & Reagards, Manikanth     ... View more

Hi Everyone,   How can we remove the form inputs in the Dashboard URL.   ?form.messageInQGrater=Enter%20Message%20Queue%20Value&form.filterQuerystatus=Success&form.filterQueryMT=environment!%3D"*prod*"&form.environment1=non_prod&form.filterQuery_BTS=environment%3D"*prod*"&form.time.earliest=-30m%40m&form.time.latest=now&form.searchfield=Transaction%20ID&form.tableSearchField=Application&form.time1.earliest=-1h%40h&form.time1.latest=now&form.filterQuery_app=environment%3D"*prod*"&form.filterQuery_error=environment%3D"*prod*"&earliest=0&latest=&form.businessGroupMT=*&form.busines_groupQ=*&form.region_nameQ=*&form.appNameMT=*&form.businessGroupTS=*&form.interfaceNameMT=*&form.searchstring=Enter%20Transaction%20ID&form.tableSearchString=&form.environment_nameQ=*&form.busines_group_app=*&form.environment_name_app=*&form.busines_group_error=*&form.application_name_error=*&form.appVersion_app=*&form.category_error=SC1&form.queue_name_dd=*&form.criticality_app=*&form.status_app=*   Thanks & Regards, Manikanth   ... View more

Hi Everyone,   Is there anyway to limiting the users for a particular HTML Dashboard in Splunk? ... View more

Hi Everyone,   We are receiving below Data from HEC Token into Splunk. { " mirId " : " Mule-111 ", " appVersion " : " v1 ", " businessGroup " : " Ecomm-Direct2Customer ", " compress " : false , " appName " : " dev-pross-Ecomm-int-v1 ", " relational_correlationId " : " 22572801-b09e-11ea-9659-023335c1afde ", " tracePointDescription " : " Capture payload ", " threadName " : "[ MuleRuntime ] .cpuLight.13: [ adaptive-logger-test ] .adaptive-loggerFlow.CPU_LITE @6dbce5f9 ", " content " : { " exception " : "", " payload " : " https://s3.console.aws.amazon.com/s3/object/unilever-ai-operationalframework/LEVEREDGE/prod/dispatchAdvice/c96d4fa0-a5fb-11ea-95a5-0281bc7d1468ERROR-2020-06-04T00:39:25.154Z1591231167.txt ? region=us-east-2 & amp ; tab=overview ", " businessFields " : { }, " category " : " org.unilever.apps.adaptiveloggertest " }, " environment " : " TJ-Ecomm-Dev ", " LogMessage " : " Test-TJ-SCHED ", " correlationId " : " 227425e0-b09e-11ea-9659-023335c1afde ", " interfaceName " : " Process finance Layer ", " tracePoint " : " START ", " timestamp " : " 2020-06-17T13:26:21.759Z " } We are trying to create a Indexed field for  correlationId  at Indexing time by using transforms.conf, props.conf,  fields.conf . How to link these conf files with inputs.conf. Please help me in this. Thanks&Regards, Manikanth ... View more

Hi Everyone, We have two indexed fields in Index A. We are doing some calculations using  tstats and collecting to another summary index B Those two fields will act as indexed fileds or not in Summary Index?     ... View more

Hi every one I have a schedule search which will run every 5 mins.But some times it going into failed state .Is there any way or setting to Re Run that schedule search as soon as it goes into failed state? Thanks&Regards, Manikanth ... View more

Hi Everyone I have two Indexes (IndexA and IndexB)in both i have some common events. I need to append only the common events from Index B to the IndexA Data? Syntax Like This? index=indexA |append [search index=indexB |Here write filter condition] Please help me out this? ... View more

Hi Everyone, Please help me to write cron expression to run a schedule search at 2:30,10:30,18:30 in every day. Thanks in advance. ... View more

Hi everyone, Can you please help us to make the Secure cookies by doing below things. Setting HTTPOnly Flag to splunkwebcsrftoken_8000 Setting Secure flag to splunkwebcsrftoken_8000, splunkdid8000,splunkd_8000 Setting SameSite Attribute to strict or lax to splunkwebcsrftoken_8000, splunkdid8000,splunkd_8000 Please help me out by providing any solutions or suggestions. ... View more

Hi, In Splunk Cloud Instance I am unable to find TCP options under Data Inputs. Please help to send the Data from Mulesoft to Splunk Cloud Instance using TCP. ... View more

Hi Everyone, We have some security issues raised in that we want to make All the cookies with secure flag and Set the SameSite attribute to Strict or Lax. Is any configuration settings provided by Splunk? Please help me out with this. ... View more

Hi, I have the Splunk HTML Dashboard below is the URL. "https://xxxxx/en-US/app/xxxx/xxx?form.tab=C4.MVX&form.field1=Conveyor%20DE%20Velocity&form.field1a=%22-6h%22&form.field1CR2=%22Crusher.2.MTR%20DE%20Velocity%22&form.field1aCR2=%22-6h%22&earliest=0&latest=" Dashboard contains form inputs Drown downs How can i filter meta characters(all special characters like( %, <,>) form user input or from URL to prevent XSS attack? Please help me out of this? ... View more