×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
joshuariley
New Member
Member since: ‎10-11-2018
‎06-05-2020
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎10-11-2018
View All

Re: Can a Splunk Heavy Forwarder send data via UDP...

by in Splunk Enterprise Security
‎08-23-2019 09:44 AM
‎08-23-2019 09:44 AM
I realize this is an old thread, but thought I'd chime in just in case the situation is still pending. You could do that, but you would need to write the incoming (to the HF) data to disk so that you could go back to it later if you needed to resend it. Otherwise, the HF will just hold the data it is forwarding in memory and dump it once it has been successfully sent. You would almost need to index and forward on the HF so that you can compare data on both sides of whatever network you are traversing here. Bottom line is, this can be done, it might just take some creative solutions to accomplish it. ... View more

MQ Modular input not working

by in All Apps and Add-ons
‎01-24-2019 01:10 PM
‎01-24-2019 01:10 PM
I cannot get the MQ modular input to work at all. When I execute the mqinputs.py manually I recieve the following: root@dabcmiqm1:/opt/splunkforwarder/bin:> ./splunk cmd /usr/bin/python "/opt/splunkforwarder/etc/apps/mq_ta/bin/mqinput.py" Traceback (most recent call last): File "/opt/splunkforwarder/etc/apps/mq_ta/bin/mqinput.py", line 20, in import xml.sax.saxutils File "/opt/freeware/lib/python2.7/xml/sax/saxutils.py", line 6, in import os, urlparse, urllib, types File "/opt/freeware/lib/python2.7/urllib.py", line 30, in import base64 File "/opt/freeware/lib/python2.7/base64.py", line 10, in import binascii ImportError: Could not load module /opt/freeware/lib/python2.7/lib-dynload/binascii.so. Dependent module /opt/splunkforwarder/lib/libz.a(libz.so.1) could not be loaded. The module has an invalid magic number. Could not load module /opt/freeware/lib/python2.7/lib-dynload/binascii.so. Dependent module /opt/freeware/lib/python2.7/lib-dynload/binascii.so could not be loaded. Any help with this would be greatly appreciated! ... View more

Re: Including SSL Certificates in a Splunk App

by in Security
‎10-11-2018 06:12 AM
‎10-11-2018 06:12 AM
We have our certs deployed via an app. In our ouputs, we just point to the app path as the cert path and it works fine. Alternatively, you can deploy and script with the cert and move the cert from the app into $SPLUNK_HOME/etc/auth using the script. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM