Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About bill_king
bill_king
Path Finder
Member since:
10-02-2019
12-05-2023
Community Statistics
| Posts | 14 |
| Solutions | 0 |
| Karma Given | 5 |
| Karma Received | 7 |
| Member Since | 10-02-2019 |
Activity Feed
- Posted Any recommendations for which existing Data Model would be best to match up Qumulo to CIM Compliance? on Splunk Enterprise Security. 08-08-2022 06:47 PM
- Tagged Any recommendations for which existing Data Model would be best to match up Qumulo to CIM Compliance? on Splunk Enterprise Security. 08-08-2022 06:47 PM
- Tagged Any recommendations for which existing Data Model would be best to match up Qumulo to CIM Compliance? on Splunk Enterprise Security. 08-08-2022 06:47 PM
- Tagged Any recommendations for which existing Data Model would be best to match up Qumulo to CIM Compliance? on Splunk Enterprise Security. 08-08-2022 06:47 PM
- Karma Re: Duel Purpose TLS Certificate? for PickleRick. 06-30-2022 01:24 PM
- Posted Re: Duel Purpose TLS Certificate? on Splunk Enterprise. 06-30-2022 12:08 PM
- Posted Is anyone using the same TLS internally signed certificate for the host and web? on Splunk Enterprise. 06-30-2022 11:26 AM
- Tagged Is anyone using the same TLS internally signed certificate for the host and web? on Splunk Enterprise. 06-30-2022 11:26 AM
- Tagged Is anyone using the same TLS internally signed certificate for the host and web? on Splunk Enterprise. 06-30-2022 11:26 AM
- Tagged Is anyone using the same TLS internally signed certificate for the host and web? on Splunk Enterprise. 06-30-2022 11:26 AM
- Tagged Is anyone using the same TLS internally signed certificate for the host and web? on Splunk Enterprise. 06-30-2022 11:26 AM
- Posted Re: creating a TA CIM compliant for Qumulo on Getting Data In. 03-10-2022 06:55 PM
- Karma Re: Skipped Jobs - Accelerated Data Models for scelikok. 02-11-2021 04:59 PM
- Posted Re: Skipped Jobs - Accelerated Data Models on Reporting. 02-11-2021 09:44 AM
- Tagged Re: Skipped Jobs - Accelerated Data Models on Reporting. 02-11-2021 09:44 AM
- Tagged Skipped Jobs - Accelerated Data Models on Reporting. 02-11-2021 09:41 AM
- Posted Skipped Jobs - Accelerated Data Models on Reporting. 02-10-2021 04:57 PM
- Got Karma for Re: SSL Checker - Inaccurate Dashboard Results. 08-20-2020 11:27 AM
- Posted Re: SSL Checker - Inaccurate Dashboard Results on All Apps and Add-ons. 08-20-2020 10:48 AM
- Got Karma for Re: SSL Checker - Inaccurate Dashboard Results. 08-20-2020 06:29 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
08-08-2022
06:47 PM
Any recommendations out there which existing Data Model would be best to match up Qumulo (network drive file access, mods, delete, read, and so on) log events to for CIM compliance? One might think the "Data Access" DM but the fields are not even close; the Endpoint.filesystem DM appears to be my best option.
... View more
- Tags:
- cim
- data model
- qumulo
Labels
- Labels:
-
using Enterprise Security
06-30-2022
12:08 PM
Agreed; we do not intend on using Splunk-supplied certs but rather internal signed certs. Have you been able to successfully dual purpose host & web certs for Splunk before?
... View more
06-30-2022
11:26 AM
Is anyone using the same TLS internally signed certificate for the host and web?
If so, is there anything additive to the cert process I should know while setting something like that up?
... View more
Labels
- Labels:
-
configuration
03-10-2022
06:55 PM
Hello @gcusello were you ever able to come up with custom qumulo CIM compliance configurations? If so, is that something you'd be willing to share? My company just started injesting a tremendous amount of qumulo syslog events. Thank you - Bill
... View more
02-11-2021
09:44 AM
your response does not make sense to me on where & how to fix the issue.
... View more
- Tags:
- skipped job
02-10-2021
04:57 PM
Not sure where & how to address the below skipped job. I would appreciate any guidance Report Name Skip Reason (Skip Count) Alert Actions _ACCELERATE_DM_SA-IdentityManagement_Identity_Management.Expired_Identity_Activity_ACCELERATE_ The maximum number of concurrent historical scheduled searches on this instance has been reached (1) none
... View more
- Tags:
- skipped job
Labels
- Labels:
-
report acceleration
08-20-2020
10:48 AM
1 Karma
hello - I have been using version 4.0.1 (dated 7 August on Splunkbase)
... View more
08-19-2020
05:30 PM
1 Karma
index=_internal ssl_checker source=*splunkd.log host="lpul-splunkapp1" returns the attached events I'm thinking the syntax error may be the likely source of the problem.
... View more
08-19-2020
09:58 AM
1 Karma
no results returned for: index=_internal sourcetype=splunk_python
... View more
08-18-2020
04:54 PM
That makes sense; thank you. Auto ssl checker is set as true in the app input.con file. All other options are set as false in the same file. #linux automated ssl checker [script://./bin/ssl_checker3.py] interval = 0 0 * * * index = main sourcetype = ssl_certs disabled = 0
... View more
08-18-2020
01:22 PM
1 Karma
greetings - I thought that may be the case with just leaving the default auto SSL cert detection option enabled and waited overnight though it still did not work for me. Though I am using python2 whereas you mentioned using python3 so perhaps that could be the issue/difference? I realize that the install includes scripts for both versions of python.
... View more
08-14-2020
04:39 PM
1 Karma
Thank you. The app is working on one of our search heads. Automagic SSL Checker Input Configuration isn't working but Manual SSL Checker Input Configuration is.
... View more
08-13-2020
05:48 PM
1 Karma
I found the issue; the query uses all time by default to research for cert data which would make sense why the dashboard displays certs that no longer exist. Interesting enough for testing purposes I changed the query for the last 24 hours and the correct data is displayed. But then I set the app cron job to run every minute (again for testing newly added cert monitoring paths and rebooted server before re-running SSL cert dashboard) running for same search for the last 5 minutes returns nothing.
... View more
08-13-2020
04:39 PM
1 Karma
I have installed the latest version of SSL checker on our Search Head that is running Enterprise 7.3.3. The associated dashboard works as intended except when I update and/or remove certs the dashboard does not refresh (still showing old certs that no longer reside on the search head). I have performed reload exec, debug refresh, and restarted the server with no success at resolving the issue. Within the manual setup portion of the app I also reduced the list of certs to monitor to just one. Even after does all the same above troubleshooting actions the SSL Dashboard is still showing all the previous monitored certs to include those that have since been removed or updated on the server. Please advise what other troubleshooting steps I should try. @jkat54
... View more
