Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About yarick
yarick
Path Finder
Member since:
08-29-2016
04-06-2022
Community Statistics
| Posts | 14 |
| Solutions | 1 |
| Karma Given | 16 |
| Karma Received | 2 |
| Member Since | 08-29-2016 |
Activity Feed
- Posted Re: Why am I getting a "SSL: CERTIFICATE_VERIFY_FAILED" error despite having valid certificates in Splunk Add- on All Apps and Add-ons. 04-05-2022 11:58 AM
- Posted Re: Why am I getting a "SSL: CERTIFICATE_VERIFY_FAILED" error despite having valid certificates in Splunk Add- on All Apps and Add-ons. 04-05-2022 11:56 AM
- Karma Re: Health warning - The percentage of small of buckets created (40) over the last hour is very high ... for gjanders. 07-08-2020 12:03 PM
- Got Karma for Error on Overview Pane - Failed to fetch REST endpoint. 07-02-2020 08:34 AM
- Karma Re: Splunk 7.2.2 - systemd - Root privileges required when starting/stopping Splunk? for dwaddle. 06-05-2020 12:50 AM
- Karma Splunk AWS TA S3 Access Logs Bugs for danint. 06-05-2020 12:50 AM
- Got Karma for Error on Overview Pane - Failed to fetch REST endpoint. 06-05-2020 12:50 AM
- Karma Re: AWS Kenisis Data Stream Fails with "Could not connect to the HEC endpoint. Make sure that the certificate and the host are valid" for zamkov. 06-05-2020 12:49 AM
- Karma Re: Why am I receiving this index installation error? for micahkemp. 06-05-2020 12:49 AM
- Karma The Http Event Collector (HEC) accepts but doesn't index _json event with accented characters — is this a bug? for joelroth. 06-05-2020 12:49 AM
- Karma Re: How do I ingest Nessus Compliance scan results for kent_farries. 06-05-2020 12:48 AM
- Karma Re: Splunk Add-on for Nessus; How to get certificate information from Nessus? for rwang_splunk. 06-05-2020 12:48 AM
- Karma Re: Custom command for json event for Flynt. 06-05-2020 12:48 AM
- Karma Re: How to resolve issues with mongod startup such as "Failed to start KV Store process" error? for hunters_splunk. 06-05-2020 12:48 AM
- Karma Re: SPLUNK Tableau no data for acharlieh. 06-05-2020 12:47 AM
- Karma Re: Is it possibl to get a list of available indices ? for MuS. 06-05-2020 12:46 AM
- Karma Re: Install Splunk Universal Forwarder into OpenShift platform for outcoldman. 06-05-2020 12:46 AM
- Karma Re: What is the best timestamp format to use for my custom log to be indexed by Splunk? for gkanapathy. 06-05-2020 12:45 AM
- Karma Re: What is the best timestamp format to use for my custom log to be indexed by Splunk? for vliggio. 06-05-2020 12:45 AM
- Karma Re: How do I concatenate two fields into a string? for chris. 06-05-2020 12:45 AM
Topics I've Started
04-05-2022
11:58 AM
@bharathnetskope- If you have access to the Tenable Support Portal, there should be a spec. That describes if that is supported. It was not in the version of SC I was using.
... View more
04-05-2022
11:56 AM
@VijaySrrie- I have not used this particular app, the same should apply - Check if your app is providing a cacerts bundle OR update version of the same provided on a system-wide level (OS not Splunk).
... View more
11-04-2019
09:50 AM
I would suggest a manual edit or deployment of *NIX App. Using deployment server.
... View more
01-10-2019
09:25 AM
If an admin actually started Splunk as root at least once, I would suggest to check permissions on directory $SPLUNK_HOME ( with recursion ), prior to attempting to start Splunk as your user of the limited domain ( in your case, splunk ) ...
... View more
01-03-2019
10:45 AM
Perfect, thanks!
... View more
01-03-2019
10:17 AM
2 Karma
REST Processor: Failed to fetch REST endpoint uri=https://127.0.0.1:8089/services/alerts/correlationsearches?count=0 from server https://127.0.0.1:8089. Check that the URI path provided exists in the REST API.
Unexpected status for to fetch REST endpoint uri=https://127.0.0.1:8089/services/alerts/correlationsearches?count=0 from server=https://127.0.0.1:8089 - Not Found
... View more
09-12-2018
12:12 PM
MAX_EVENTS = <integer> Specifies the maximum number of input lines that Splunk software adds to any event. The software breaks the event after it reads the specified number of lines. 256 lines
REF. https://docs.splunk.com/Documentation/Splunk/7.1.2/Data/Configureeventlinebreaking
... View more
08-28-2018
10:09 AM
Let's Encrypt was not listed in the cert. Store for the Add-on.
I updated the list with this command = cat /etc/ssl/certs/ca-bundle.crt >> /opt/splunk/etc/apps/Splunk_TA_nessus/bin/splunktalib/httplib2/cacerts.txt
There may be a solution that is more elegant. For example, to ship updated version of the library, or rely on system libraries. But, that is a much larger discussion.
SSL Certificate is validated by the Add-on and operating as expected. This solved my issue.
... View more
08-28-2018
09:36 AM
Add-on is configured to obtain data from Tenable nessusd (Nessus) 7.1.3 [build M20120] for Linux
Error in logs
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verification failed.
SSL Connection test
New, TLSv1/SSLv3, Cipher is AES128-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : AES128-SHA
Session-ID:
Session-ID-ctx:
Master-Key: EFB3E32FE3292430D26CE3BE6B5DF3FB9D6ECE9922687B0ECD51A7B82A31B11342F43CD30A1671FFCE030AE4D047B381
Start Time: 1535474072
Timeout : 300 (sec)
Verify return code: 0 (ok)
Certificate Authority used for this connection - Lets Encrypt
... View more
04-05-2018
07:10 PM
msivill, I have tried to configure splunk-logging-driver-for-docker as you suggested. It worked like a charm. But, it stops working as soon as OpenShift gets added to the mix. Reading OpenShift source code ... got complex and "hairy in a hurry."
If anyone has any real-world implementations of the Splulnk App suggested by outcoldman, I would love to hear your thoughts. PM is ok.
Y.
... View more
12-15-2017
11:23 AM
@bentysontcxn : I am having exact same issue. Have you tried opening a ticket with AWS Support?
In addition to error : "Could not connect to the HEC endpoint. Make sure that the certificate and the host are valid."
I am also seeing this error a few seconds later : "An internal error occurred when attempting to deliver data. Delivery will be retried; if the error persists, it will be reported to AWS for resolution."
EDIT: ACM certificate solved the issue for me.
... View more
08-29-2016
07:28 AM
The new Service object seems to run as many searches as your quota allows. I have not seen a need to establish new connection for each thread. What version SDK / Splunk are you using ? Post your specific error, if got one.
... View more
