Hi Dev Team, It has been a while since the last update version for this App was released (mid 2023) and now lost Splunk Cloud certification for compatibility. Can we please have this App revised to match Splunk Cloud requirements for compatibility? Thank you. Regards.
... View more
News!? It seems we need an updated version for this App compatible with Splunk Cloud (vetted) as it is no longer/lost its Splunk Cloud compatibility (no longer vetted). Is anyone aware of any updates here? Thank you.
... View more
Hi Splunk Inc. Team,
I'm experiencing issues with truncation across all sourcetypes "OktaIM2:*" where in most cases only TRUNCATE=250000 can resolve.
I also detected an issue with LINE_BREAKER regex pattern for sourcetype=OktaIM2:group causing logs not to be ingested.
...current pattern defaults to:
([\r\n]+)
and I had to modify to: (?<=\}\}\})(\, )
Can we please have these issues addressed and a new version cut for this Add-on in splunkbase?
Thank you.
... View more
Hi nathanluke86,
Splunk Cloud IDM solves the problem!!
**To create inputs under customized index (not main/default) you should create the new index on the IDM environment first, which will then be replicated to the other instances part of the cluster.
... View more
The same issue detected on the new Splunk Enterprise 7.2.6.
Any new workaround as I can't give up Alerts for Reports as Throttle is required in my solution.
... View more