Activity Feed
- Got Karma for Splunk App for Windows Infrastructure: Why is page_printed always 0 monitoring Windows print server?. 06-05-2020 12:47 AM
- Got Karma for Splunk App for Windows Infrastructure: Why is page_printed always 0 monitoring Windows print server?. 06-05-2020 12:47 AM
- Posted Splunk add-on for Microsoft Cloud Services: Why does the add-on for MS cloud breaks all the other apps when enabled? on All Apps and Add-ons. 02-14-2018 07:59 AM
- Tagged Splunk add-on for Microsoft Cloud Services: Why does the add-on for MS cloud breaks all the other apps when enabled? on All Apps and Add-ons. 02-14-2018 07:59 AM
- Tagged Splunk add-on for Microsoft Cloud Services: Why does the add-on for MS cloud breaks all the other apps when enabled? on All Apps and Add-ons. 02-14-2018 07:59 AM
- Posted Re: Splunk App for Windows Infrastructure: Why am I getting error "invalid attribute type in attribute list: msDS-PrincipalName" when running change or audit reports? on All Apps and Add-ons. 03-09-2015 12:22 PM
- Posted Re: Splunk App for Windows Infrastructure: Why am I getting error "invalid attribute type in attribute list: msDS-PrincipalName" when running change or audit reports? on All Apps and Add-ons. 03-06-2015 11:24 AM
- Posted Splunk App for Windows Infrastructure: Why am I getting error "invalid attribute type in attribute list: msDS-PrincipalName" when running change or audit reports? on All Apps and Add-ons. 03-02-2015 08:18 AM
- Tagged Splunk App for Windows Infrastructure: Why am I getting error "invalid attribute type in attribute list: msDS-PrincipalName" when running change or audit reports? on All Apps and Add-ons. 03-02-2015 08:18 AM
- Posted Splunk App for Windows Infrastructure: Why is page_printed always 0 monitoring Windows print server? on All Apps and Add-ons. 11-19-2014 01:04 PM
- Tagged Splunk App for Windows Infrastructure: Why is page_printed always 0 monitoring Windows print server? on All Apps and Add-ons. 11-19-2014 01:04 PM
- Tagged Splunk App for Windows Infrastructure: Why is page_printed always 0 monitoring Windows print server? on All Apps and Add-ons. 11-19-2014 01:04 PM
- Tagged Splunk App for Windows Infrastructure: Why is page_printed always 0 monitoring Windows print server? on All Apps and Add-ons. 11-19-2014 01:04 PM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 | |||
0 | |||
2 |
02-14-2018
07:59 AM
I have several other apps that use the REST Api for authentication. Whenever I enable the Add-on for MS Cloud it breaks all the other apps.
If you were to browse out to https://127.0.0.1:8089/services/storage/passwords prior to enabling this add-on it would reflect the correct REST credentials for the other apps.
Once you enable the MS Cloud TA the only credentials in /storage/passwords are for this TA all the rest are gone
Disable the app and the other creds are back.
... View more
03-09-2015
12:22 PM
I would send a screen shot if I could figure out how to put it here. As an fYI I built an entire new Splunk server and followed these steps to the letter http://docs.splunk.com/Documentation/MSApp/1.1.2/MSInfra/Releasenotes
Here is what is in the "New Search" box
| secrpt-large-groups(domain,100)
Here is the error message
⚠ External search command 'ldapgroup' returned error code 1. Script output = " ERROR "LDAPAttributeError at ""C:\Program Files\Splunk\etc\apps\SA-ldapsearch\bin\packages\ldap3\operation\search.py"", line 315 : invalid attribute type in attribute list: msDS-PrincipalName" "
... View more
03-06-2015
11:24 AM
I checked and I had previously activated that app and it passed the self test. The prerequisite check finds everything and processes just fine.
... View more
03-02-2015
08:18 AM
I am trying to use the Splunk App for Windows Infrastructure to track changes to AD groups and users.
Running on a Windows 2003 domain. I have installed the latest version of the app and the correct TA add-on for 2003 domains.
However when run any of the built-in change or audit reports it errors out with "invalid attribute type in attribute list: msDS-PrincipalName"
As far as I can tell this is an Active Directory attribute in AD 2008 an higher.
... View more
11-19-2014
01:04 PM
2 Karma
I have followed this example to the letter. http://blogs.splunk.com/2014/04/21/windows-print-monitoring-in-splunk-6/
I am trying to use this to perform chargeback to departments. Everything seems to work with the exception that page_printed is always 0
Hard to do a chargeback when you can't see the total pages printed
... View more