Andrewwest, Is this on the CM or indexers? I have the same issue, but I am not able to login to the CM via GUI so I am having a hard time figuring it out. Let me know where to change it. ... View more

Mikalbje, I am having an issue, I am working with someone who has the Cisco Network Add-on for Splunk installed in the Syslog server, but not their Heavy Forwarder, also I see that the Cluster Master has the app and due to it, it was deployed to all four indexers as well. The TA and Cisco Network app is also installed on their utility search head, but I am not seeing any data. I see that the syslog installation of the TA has an inputs.conf file in the app/local folder, but none exists on the indexers because there is no configuration on the cluster master. Does there need to be any inputs.conf file in the app/local or not? Also should I install the TA on the HF as well? ... View more

I checked and the application under which the lookup resides is not imported into the ES. Maybe that is why I am not able to see it. Anyway I can make the app import into the ES? ... View more

I am seeing issues when trying to index data on 6.5.2. Put it on a SH and I am getting the following, see if you can assist. Looks like other python scripts causing issues as well. Traceback (most recent call last): File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/splunktaucclib/data_collection/ta_data_collector.py", line 115, in index_data self._do_safe_index() File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/splunktaucclib/data_collection/ta_data_collector.py", line 148, in _do_safe_index self._client = self._create_data_client() File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/splunktaucclib/data_collection/ta_data_collector.py", line 95, in _create_data_client self._checkpoint_manager) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/splunktaucclib/data_collection/ta_data_client.py", line 55, in __init__ self._ckpt) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/ta_tenable_sc_data_collector.py", line 18, in do_job_one_time return _do_job_one_time(all_conf_contents, task_config, ckpt) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/ta_tenable_sc_data_collector.py", line 57, in _do_job_one_time logger_prefix=logger_prefix) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/security_center.py", line 219, in get_security_center sc.login(username, password) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/security_center.py", line 45, in login result = self.perform_request('POST', 'token', data) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/security_center.py", line 140, in perform_request self._error_check(response, result) File "/opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunk_ta_nessus/security_center.py", line 189, in _error_check result['error_msg']) APIError: 'status=403, error_code=163, error_msg=Account locked.\n' ... View more

MuS, I understand you wrote the Active Directory Add-on app. I have a question, I have a list of users that I need to pull ldap information on, is there a way I can do an inputlookup with ldap search? Let me know if that could be a possibility. I am trying to gather every attribute for these users and whether they are deactivated or not. Thanking you for your time. Gopmister ... View more

mgh4, Doing the same did not help me. I am able to pull the License Usage Today, but not able to pull the license usage previous 30 days. I followed your recommendations and it did not help. Though settings in both are the same. ... View more

Blockquote I was able to find the document. I had to install the app and it is in the \etc\apps\Function1_WebLogicServer\appserver\README directory. ... View more

Where is the document? I am trying to find the document to setup Oracle-weblogic for Splunk and I do not see any document in Splunk base. Can you help me out please. Thanking you, Punit ... View more