About davidemagni

davidemagni · ‎02-07-2023

Hello, since some time ago we are experiencing high CPU and/or memory usage related to the splunk_ta_o365 input addon. The processes impacted are the python ones: %CPU PID USER COMMAND 98.9 317938 splunk /opt/splunk/bin/python3.7 /opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365_graph_api.py 97.7 317203 splunk /opt/splunk/bin/python3.7 /opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365_graph_api.py 8.8 3058237 splunk splunkd -p 8089 restart Updating didn't resolved the issue Is anyone else experiencing this? How can we manage it? Thanks!!

davidemagni · ‎11-30-2022

Hello, we are trying to configure the receiving of AppFlow data from Citrix Netscaler, using the Splunk Add-on for Citrix Netscaler and Splunk Stream. Everything seems to work, except that not all fields are visible on the search head. We can see "netflow_elements" but probably not "recognized". How can we manage this? Any suggestion? Thanks!

davidemagni · ‎03-21-2022

Actually yes. In your system/default/web.conf you should have these conf: # First party apps: splunk_dashboard_app_name = splunk-dashboard-studio # enable/disable splunk dashboard app feature enable_splunk_dashboard_app_feature = true Please check if you are overwriting them somewhere (e.g. system/local) I had a copy of the old web.conf in system/local so the new configurations were not applied.

davidemagni · ‎09-28-2021

Hi, same problem here. Upgrade path: 8.1.3 -> 8.2.2.1 Is there any news? Thanks!!

davidemagni · ‎05-10-2021

Hi all, I configured the addon in the subject for Azure Firewall log retrieving, using Log Analytics. It works; however, the CPU usage on the server where Splunk is installed and configured is always 100%. Does anyone experienced the same? How can I fix? Thanks!

davidemagni · ‎09-01-2020

Hi all, we are planning a Splunk Enterprise Deploy in Azure, but I am not able to find an updated documentation about that. I'd like to know if and how it's different compared to a standard on-premise deployment and the VM type we need to choose. This is the only document I was able to find: https://www.splunk.com/pdfs/technical-briefs/deploying-splunk-enterprise-on-microsoft-azure.pdf Is it updated? Thanks!

davidemagni · ‎10-08-2019

Hi community, Do you know if there is a reliable or supported way to export charts from a dashboard in a high quality format? I've tried to test some js using html2canvas but with no results, and it doesn't seems to be a reliable way. Thanks! Davide

davidemagni · ‎05-29-2019

Hi all, does anyone knows if it is possible to integrate with the Cloud version of MobileIron MDM? I know that there is an app on the MobileIron store, but it supports only the Core (onprem) version, which provide an integrated Splunk Forwarder. MobileIron Cloud provides API access, but I'd like to know if there is something ready to use. Thank you!

davidemagni · ‎02-19-2019

Hi all, we are experiencing problem with the Deployment Server after the 7.2.3 release. The Universal Forwarder is installed with enable-boot start, so integrated in systemd. After the deploy of a serverclass, with the "restart after deploy" flag checked, the forwarder stops communicating with the DS. We suppose this is because of the needs of a root password for restarting the splunk systemd service. Does anyone have this problem? How can we manage it? Thank you in advance! Davide Magni

Posts	11
Solutions	1
Karma Given	0
Karma Received	2
Member Since	‎02-19-2019

Online Status	Offline
Date Last Visited	‎02-07-2023 10:49 AM

How can we manage Splunk Office 365 High CPU Usage...

Splunk Add-on for Citrix Netscaler - IPFIX/AppFlow

Azure Log Analytics Kusto Grabber CPU usage

Splunk Enterprise Deployment in Azure

High quality chart export

Mobileiron Cloud

Splunk 7.2.3 Deployment Server Automatic splunkfor...