Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About aagro
aagro
Path Finder
Member since:
12-09-2015
04-07-2025
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 29 |
| Karma Received | 4 |
| Member Since | 12-09-2015 |
Activity Feed
- Got Karma for Re: Health Check: Minimum System Requirements for Indexers. 05-26-2025 05:31 PM
- Posted Re: Retrieve list max 30 roles when bind LDAP group name and role splunk on Security. 04-02-2025 12:54 AM
- Karma Re: Retrieve list max 30 roles when bind LDAP group name and role splunk for Drunkenjudge. 04-02-2025 12:51 AM
- Posted Retrieve list max 30 roles when bind LDAP group name and role splunk on Security. 01-23-2025 06:35 AM
- Karma Re: How to configure Lookup File Editor App for Splunk Enterprise to be called from other app's navigation menu? for gcusello. 07-04-2024 05:44 AM
- Posted Re: Splunk DB Connect Error: Error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderExceptio on All Apps and Add-ons. 05-31-2024 04:25 AM
- Karma Re: Splunk DB Connect Error: Error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderExceptio for krutika_ag. 05-31-2024 04:24 AM
- Karma Re: Health Check: Minimum System Requirements for Indexers for gcusello. 03-14-2024 02:19 AM
- Posted Re: Health Check: Minimum System Requirements for Indexers on Deployment Architecture. 03-14-2024 02:18 AM
- Karma Re: Alert action "log event" not writing to index and receiving error message for Sivrat. 06-16-2022 07:26 AM
- Posted Re: Alert action "log event" not writing to index and receiving error message on Alerting. 06-16-2022 07:24 AM
- Karma Re: Drill down to absolute URL using click.value for johnmvang. 11-02-2021 10:04 AM
- Karma Re: IIS Logs: Missing host field / inconsistent host values ms:iis:default and ms:iis:auto for triest. 09-11-2020 03:16 AM
- Karma Re: How to troubleshoot error "idx=... Throttling indexer, too many tsidx files in bucket=..." on my distributed management console? for swmishra_splunk. 07-15-2020 05:27 AM
- Karma Re: A link to another apps in navigation menu for MuS. 06-25-2020 05:32 AM
- Karma Re: New Indexer Failing due to Cert Password, what is the default password? for tiagofbmm. 06-05-2020 12:50 AM
- Karma Does the Splunk Add-On for Tenable support Nessus 8.x? for dgillette3. 06-05-2020 12:50 AM
- Karma Re: Why are counters from Perfmon not being extracted? for bhargavnariyani. 06-05-2020 12:50 AM
- Got Karma for SSL Certificate verify failed on Splunk Add-on for Microsoft Office 365. 06-05-2020 12:50 AM
- Got Karma for SSL Certificate verify failed on Splunk Add-on for Microsoft Office 365. 06-05-2020 12:50 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 2 |
01-23-2025
06:35 AM
After the upgrade of Splunk core to release 9.4.0, if I want to bind LDAP group name to role inside splunk (I have about 200 role), splunk show me only 30 role. I tried to bypass this bug/issue setting it via conf file and then restarting the splunk service but this is boring. Do you encountered this issue? How to resolve that? NOTE: Environment Search Head Cluster Splunk Enterprise rel. 9.4.0
... View more
Labels
- Labels:
-
authentication
-
LDAP
05-31-2024
04:25 AM
Your solution is right:
jdbc:sqlserver://IP:Port;databaseName=dbname;selectMethod=cursor;encrypt=false;trustServerCertificate=true
I resolve my issue, thank a lot
... View more
03-14-2024
02:18 AM
1 Karma
I encountered the same problem after ES (7.3.0) installation and what Giuseppe say is correct about the RAM. To avoid the issue edit alert "Audit - ES System Requirements" on SH ES and adjust the RAM value. Splunk expect 32000MB RAM into the check but your system can report 31750MB as 32GB RAM. Regards, Antonio
... View more
06-16-2022
07:24 AM
Hi encountered the same issue on my architecture (SH cluster and IDX cluster). I resolved the problem deploying the index configuration on both search head and indexer. In distributed environment the index must be exists on search head and indexer.
... View more
11-22-2019
03:52 AM
Same problem, I roll back Splunk DB Connect, below the details about my environment:
Splunk Enterprise 8
Splunk DB Connect 3.1.3
JAVA jdk1.8.0_181
Suppose bugs.
Regards,
Antonio
... View more
02-26-2019
01:52 AM
Did you encountered problem on Windows?
By default I advise you to install the last version of Splunk Enteprise and DB Connect.
Let us know if you're having problems.
Regards,
Antonio
... View more
01-23-2019
05:08 AM
Hi DalJeanis,
your solution is ingenious.
Thanks so much!
Antonio
... View more
01-21-2019
06:47 AM
Yes I solved it but I did not try with downgrade.
I keep your suggestion as another way to solve the problem.
Thanks,
Antonio
... View more
01-17-2019
06:24 AM
Thank you Alvaro!
... View more
01-17-2019
06:23 AM
No, DB Connect version 3.1.4 was first installation, but I keep mind yor suggestion.
Thanks,
Antonio
... View more
01-11-2019
03:24 AM
I resolve the problem tuning the env variable of OS (my LANG/LC_ALL was in IT) :
LANG=en_US.UTF-8
LC_ALL=en_US.UTF-8
After server reboot, this one has resolved my problem.
Splunk Enterprise: 7.2.3
DB Connect: 3.1.4
OS Centos: 7.x
DB: MySQL 5.x
Regards,
Antonio
... View more
01-11-2019
01:25 AM
Hi All,
I have a problem about splunk DB Connect App (Splunk Enterprise 7.2.3 - DB Connect 3.1.4) with my MySQL instance.
The MYSQL query return events and it's all right, rising column is ok, no error, but after I save the input, the events are not indexed:
2019-01-11 10:12:13.855 +0100 [QuartzScheduler_Worker-8] ERROR org.easybatch.core.job.BatchJob - Unable to write records
java.io.IOException: HTTP Error 400, HEC response body: {"text":"Error in handling indexed fields","code":15,"invalid-event-number":0}, trace: HttpResponseProxy{HTTP/1.1 400 Bad Request [Date: Fri, 11 Jan 2019 09:12:13 GMT, Content-Type: application/json; charset=UTF-8, X-Content-Type-Options: nosniff, Content-Length: 78, Vary: Authorization, Connection: Keep-Alive, X-Frame-Options: SAMEORIGIN, Server: Splunkd] ResponseEntityProxy{[Content-Type: application/json; charset=UTF-8,Content-Length: 78,Chunked: false]}}
at com.splunk.dbx.server.dbinput.recordwriter.HttpEventCollector.uploadEventBatch(HttpEventCollector.java:132)
at com.splunk.dbx.server.dbinput.recordwriter.HttpEventCollector.uploadEvents(HttpEventCollector.java:96)
at com.splunk.dbx.server.dbinput.recordwriter.HecEventWriter.writeRecords(HecEventWriter.java:36)
at org.easybatch.core.job.BatchJob.writeBatch(BatchJob.java:203)
at org.easybatch.core.job.BatchJob.call(BatchJob.java:79)
at org.easybatch.extensions.quartz.Job.execute(Job.java:59)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)
2019-01-11 10:12:13.855 +0100 [QuartzScheduler_Worker-8] INFO org.easybatch.core.job.BatchJob - Job 'test_bcc013' finished with status: FAILED
The column of table are very simple and small like a integer id or char name.
Someone can help me please?
... View more
- Tags:
- splunk-enterprise
11-13-2018
02:55 AM
2 Karma
Hi all,
I have a problem with add-on for Microsoft Office 365 about "Add Tenant".
Every steps inside the documentation is done but when I want add a Tenant, Splunk give me the following error:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:741)
I check also the port 443 toward the endpoint and it's all right.
How can I resolve this issue?
Regards,
Antonio
... View more
- Tags:
- splunk-enterprise
10-19-2017
01:18 AM
I have resovled this problem just only adding a comment for the stanza and attributes inside the config file inputs.conf.spec as showing below:
FILE => .../Splunk_TA_f5-bigip/README/inputs.conf.spec
# [Splunk_TA_f5_bigip_main://]
# nothing=nothing
Then restart splunk.
... View more
01-15-2016
03:00 AM
1 Karma
Under the statment xml fieldset declaration, you have to insert the search via your phyton script :
<form>
<label>Input Form</label>
<fieldset submitButton="true" autoRun="false">
<input type="text" token="input1">
<label>INPUT 1</label>
</input>
<input type="text" token="input2">
<label>INPUT2</label>
</input>
</fieldset>
\</form>
##### HERE INSERT THE SEARCH VIA PYTHON SCRIPT
<search>
<query>| input "$input1$" "$input2$"</query>
<earliest></earliest>
<latest></latest>
</search>
Regards,
Antonio
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-07-2025
12:36 PM
|
Karma given to
