Activity Feed
- Posted Re: Does SplunkBase Vet apps for Security issues before publishing? on Security. 01-11-2019 05:46 AM
- Posted Re: SSL Errors Encountered when using a Universal Forwarder as an Intermediate Forwarder with SSL configured on Security. 01-10-2019 01:29 PM
- Posted Splunk Add-on for Microsoft Windows 4.8.4 splunk-netmon.exe memory leak on host? on All Apps and Add-ons. 12-28-2018 12:47 PM
- Tagged Splunk Add-on for Microsoft Windows 4.8.4 splunk-netmon.exe memory leak on host? on All Apps and Add-ons. 12-28-2018 12:47 PM
- Tagged Splunk Add-on for Microsoft Windows 4.8.4 splunk-netmon.exe memory leak on host? on All Apps and Add-ons. 12-28-2018 12:47 PM
- Tagged Splunk Add-on for Microsoft Windows 4.8.4 splunk-netmon.exe memory leak on host? on All Apps and Add-ons. 12-28-2018 12:47 PM
- Tagged Splunk Add-on for Microsoft Windows 4.8.4 splunk-netmon.exe memory leak on host? on All Apps and Add-ons. 12-28-2018 12:47 PM
- Tagged Splunk Add-on for Microsoft Windows 4.8.4 splunk-netmon.exe memory leak on host? on All Apps and Add-ons. 12-28-2018 12:47 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
01-11-2019
05:46 AM
If I read this right, according to the approval criteria (https://docs.splunk.com/Documentation/Splunkbase/splunkbase/Splunkbase/Approvalcriteria) it says that "The Splunkbase team evaluates your submitted content to ensure it meets the following..." One being a "check for malware/viruses" which is described as "run scanner software to check for viruses and malware." So though there isn't an abundance of details, it looks like the answer is yes.
... View more
01-10-2019
01:29 PM
I remember running into this I think. Are you sure your concatenated certificates are correctly formatted? Splunk wants the PEM cert file for the serverCert and clientCert entry to be the cert, key, and CA cert in that order (CA at end).
... View more
12-28-2018
12:47 PM
I'm running the Splunk_TA_windows app to collect host information from Windows Server 2012 R2 servers. If I start/restart the splunk forwarder service everything is fine however after a day or two the splunk-netmon.exe process seems to show signs of a memory leak. Over the course of a week or so the process will consume 80-90% of the host's memory. Has anyone else ran into this? I have this on multiple hosts running a mixed bag of different applications.
splunk forwarder version 6.6.6
splunk add on for microsoft windows version 4.8.4
inputs.conf for splunk_ta_windows:
###### Network monitoring ######
[WinNetMon://inbound]
direction = inbound
disabled = 0
index = windows
packetType = accept;connect
[WinNetMon://outbound]
direction = outbound
disabled = 0
index = windows
packetType = accept;connect```
... View more
