Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About jawaharas
jawaharas
Motivator
Member since:
02-09-2017
09-18-2022
Community Statistics
| Posts | 297 |
| Solutions | 30 |
| Karma Given | 176 |
| Karma Received | 65 |
| Member Since | 02-09-2017 |
Activity Feed
- Got Karma for Re: How to disable monitoring console using command line.. 02-21-2023 02:14 AM
- Got Karma for Re: How to disable monitoring console using command line.. 02-21-2023 02:14 AM
- Got Karma for Re: Why am I receiving "cannot concatenate 'str' and 'NoneType' objects" error when uploading a log file?. 02-08-2023 01:06 AM
- Got Karma for Re: Permissions on /var/log. 12-29-2022 08:47 AM
- Karma Re: install add-on: Error connecting to /services/apps/local: The read operation timed out for vgtk4431. 09-18-2022 07:13 PM
- Posted Re: How to add a field from a subsearch to every event in a parent search? on Splunk Search. 08-23-2022 07:10 PM
- Karma Re: How to change the width of panels in xml? for niketn. 08-11-2022 08:21 PM
- Karma Re: How to add a field from a subsearch to every event in a parent search? for somesoni2. 08-11-2022 07:00 PM
- Posted Re: Installed Splunk Enterprise 7.2.1 and promoted it as cluster master. Splunk Web is not loading. on Deployment Architecture. 06-21-2022 08:57 PM
- Karma Embed Field values in Title for a correlation search for bharathkumarnec. 06-10-2022 06:16 PM
- Karma Re: How to query a lookup table based on time for woodcock. 04-03-2022 05:15 PM
- Karma I am trying to use auth0 as an IDp for Splunk and I get the "Saml response does not contain group information." error, any help is greatly appreciated. for ghlogger. 03-18-2022 04:10 AM
- Got Karma for Re: How to increase 'Crash log' size?. 03-08-2022 02:29 AM
- Karma Re: Is it possible to use a countrycode "US" for the geom command? for martin_mueller. 02-20-2022 04:39 PM
- Got Karma for Re: Enterprise Security ess_admin role vs admin role. 02-18-2022 01:59 AM
- Got Karma for Re: How to extract only the first three octets of the IP address instead of the whole address?. 02-07-2022 09:55 AM
- Got Karma for Re: Enterprise Security ess_admin role vs admin role. 01-26-2022 01:02 PM
- Got Karma for Re: Explain how tokens work and define types of token filters?. 10-27-2021 12:14 AM
- Posted Re: Using Auth0 for SAML on Security. 08-13-2021 07:24 PM
- Got Karma for Re: Why am I receiving "cannot concatenate 'str' and 'NoneType' objects" error when uploading a log file?. 08-08-2021 04:49 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-23-2022
07:10 PM
Below one works for me. | gentimes start=1 end=5 | eval [| makeresults | eval foo="test" | return foo]
... View more
06-21-2022
08:57 PM
Hi @rasikmhetre , You can add 'secret key' for the addon in the 'passwords.conf' file. The password will be encrypted once you restart the Splunk service. Can you explain the issue that you are facing with CLI?
... View more
08-13-2021
07:24 PM
@mattcosa Thanks for the response. I've managed to successfully authenticate Splunk using 'Auth0' a few weeks ago. Happy to share the config if required.
... View more
07-12-2021
01:52 AM
Try out in the below format in the 'request headers'. (Replace the strike-out value with your token)
... View more
- Tags:
- ry out in
06-21-2021
09:23 AM
@ghlogger Try below config in 'authentication.conf' file. [authenticationResponseAttrMap_SAML]
role = http://schemas.auth0.com/roles The attribute value is fetched using 'SAML Tracer' addon. Also, make sure to create a 'Auth Pipeline' rule in Auth0 with below code to pull the roles during authorization. function (user, context, callback) {
// Get the user roles from the Authorization context
const assignedRoles = (context.authorization || {}).roles;
// Update the user object.
user.roles = assignedRoles;
callback(null, user, context);
}
... View more
06-21-2021
05:08 AM
@ilyaresh Thanks for the guide. I followed the steps. But, I am getting below error when I hit my Splunk instance URL. Can you please assist? invalid_request: The SAML Request AssertionConsumerServiceURL is invalid: 'https://my-splunk-domain.com/saml/acs'
... View more
10-06-2020
07:57 AM
Hello,
Is it possible to configure 'REST' data input with a 'payload' parameter (bolded section in below 'curl' command)?
I am looking to configure below curl command as a 'REST API' input in the Splunk Addon-builder.
REST API call:
curl -XGET -H 'Authorization: Bearer <token>' -H 'Content-Type: application/json' https://<app_dns>/api/case --data '{"query": {"status": "Resolved"}}'
... View more
Labels
- Labels:
-
modular input
10-05-2020
02:28 AM
1. Make the app 'Splunk App for AWS' visible to all. 2. Also, check whether the lookup table 'cloudfront_edges' is populated. If not, run/schedule the report - 'AWS Description - CloudFront Edges '
... View more
07-31-2020
05:57 AM
@datasearchninja Thanks a lot. It works.
... View more
04-29-2020
10:35 PM
Thanks. For me the error occurred, when we migrate 'Splunk_TA_aws' addon to a new server. The encrypted password in the 'passwords.conf' seems corrupted. When we re-configured the 'Key ID' and 'Secret Key' in the 'passwords.conf' file, the error disappeared.
... View more
03-31-2020
11:48 PM
Answer to this question will be helpful.
However, @petersonjared , Can you raise this query as a separate question?
... View more
03-31-2020
02:51 PM
1 Karma
As per Microsoft Azure Add on for Splunk's documentation, the add-on is compatible to below versions. When I tried the add-on (EventHub data-input) in Splunk Enterprise 7.2.9.1, its works.
COMPATIBILITY:
Products: Splunk Enterprise, Splunk Cloud
Splunk Versions: 7.3, 7.2, 7.1, 7.0
... View more
03-22-2020
01:49 AM
Is this add-on works in Splunk 8.0.2.1?
... View more
03-21-2020
07:40 PM
The issue was due to missing parameter in the REST API URL.
When I add the checkpoint parameter in the REST API call (as below), I don't see duplicate events being pulled.
https://api.teachworks.com/v1/lessons?from_date[gt]>01-01-2020
Reference:
https://docs.splunk.com/Documentation/AddonBuilder/3.0.1/UserGuide/ConfigureDataCollection#Use_checkpoints_for_incremental_data_collection
... View more
03-21-2020
07:27 PM
Same here. Any assistance will be helpful.
... View more
03-14-2020
11:04 PM
Hello,
I have created an custom add-on to pull events from 'Teachworks' API. But, as per my config (refer screenshot), duplicate records are created whenever the API call try pull the new events.
Example:
Run 1: 5 records available. 5 records pulled into Splunk
Run 2: 5 records available. 0 records pulled into Splunk
Run 3: 6 records available. 6 records pulled into Splunk
I expect only 1 record (new entry) to be pulled into Splunk during 'Run 3', not all 6 records. Any assistance will be helpful.
... View more
02-15-2020
03:07 PM
I am looking for the same solution. May be a custom command using Python script will help.
... View more
02-12-2020
06:21 PM
Another interesting blog that guide to ingest 'AWS GuardDuty' data into Splunk
https://www.splunk.com/en_us/blog/cloud/serving-it-up-with-aws-and-splunk-aws-serverless-application-repository-now-available.html
This solution uses:
AWS Serverless Application
AWS Kinesis stream
Splunk GuardDuty Add-on
Splunk Http Event Collector
... View more
01-29-2020
04:29 AM
Where does the '#' comes from?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-18-2022
10:34 PM
|
