About wyomoose

wyomoose · ‎08-30-2022

Gonna take some time to go through every dashboard of the apps but it does work. Appreciate the help.

wyomoose · ‎08-29-2022

Upgraded to Splunk 9.0.1 from Splunk 8.2.1 MS-Windows AD Objects received the dashboard error, upgraded to MS-Windows AD Objects 4.1.1 which claims to be compatible with 9.0. But even after upgrading the same error persists. Does MS-Windows AD Objects use jQuery 3.5, does 9.0.1 not work with it or am I spinning my wheels trying to make this thing work? Have the same issue with other apps but figured I would start here. Looked through the boards found stuff on jquery 3.5 but nothing specific to AD objects 4.1.1. Seems like most things work with the App it just always throws the error? Also tried the " clone the dashboard in the new studio option", no joy there. Any help is appreciated

wyomoose · ‎01-31-2022

Splunk now lists this as a known issue and offers a solution. Have not implemented it yet so can't vouch that it works. We have the had the same issue for awhile. https://docs.splunk.com/Documentation/Splunk/8.2.4/ReleaseNotes/KnownIssues

wyomoose · ‎05-18-2020

Thanks for the reply and stay safe over there. Yep we have the events we want to monitor. I was referring to the Eventid.net apps lookup table called" eventid_interesting_events" I was hoping I could add what we wanted to it and maybe tweak a couple other files and make it work. Sounds like it might just be easier to make our own.

wyomoose · ‎05-15-2020

I am looking for a App that I can take and taylor to a list of eventids that we want to Audit. We like the Eventid.net app but the list of IDs is pretty limited. I would like to take that and maybe just add more IDs to the lookup table or somehow taylor it for us. Any suggestions would be appreciated.

wyomoose · ‎12-03-2019

I am loading the Linux Auditd on cent o/s boxes. It works great with one box the others it finds them and shows me their IPs and some info in the Hosts panel but on the home panel it shows hosts missing. I put them in the retired folder and sure then they weren't missing but no info for them either. I took the splunk_TA_nix and Splunk TA auditd from the forwarder that worked and copied them to the others under the app folder still no data on the Splunk server. Any suggestions are welcome.

wyomoose · ‎11-13-2019

I have load splunk-app-for-windows-infrastructure_200, splunk-supporting-add-on-for-active-directory_300 and splunk-add-on-for-microsoft-windows_700. When I run the guided install it finds the Domain but does not find anything else from AD no controllers or nothing else. The AD directory has the info set-up and finds the domain just fine. MSAD Index has data in it at least some. Any suggestions would be appreciated.

Posts	7
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎08-02-2019

Online Status	Offline
Date Last Visited	‎09-09-2022 12:10 AM

Getting MS-Windows AD objects 4.4.1 "This Dashboar...

Can I add my owen IDs to Eventid.Net

Linux Auditd app on list host as missing but finds...

Splunk Windows App for infrastructure_200

Re: MS-Windows AD objects 4.4.1 "This Dashboard Ve...

Getting MS-Windows AD objects 4.4.1 "This Dashboar...

Re: Getting error: "Dag Execution Exception: Searc...

Re: Can I add my owen IDs to Eventid.Net

Can I add my owen IDs to Eventid.Net

Linux Auditd app on list host as missing but finds...

Splunk Windows App for infrastructure_200