Dear community, I have a massive issue with a (single hosted) Splunk installation reading files from a local drive/ UNC paths: Splunk does not read these files and doesn't show them as "available" in the Files & directories config page:   The splunkd service which is running on WIndows 2016 is configured with a local administrator user who has also full permissions on the local drives/ permissions on the UNC paths. I have checked the access logging on with this technical user to the machine and opening the paths. There is also no Virus Scanner blocking Splunk (verified with procmon). The stanzas look as follows (and have always worked for other customers and for this one some time ago): and I searched through the logs but couldn't find something really useful. The log states no issue with the file watch: Since I'm really desperate, I also tried adding the following without success: - crcSalt = <SOURCE> - alwaysOpenFile = 1 Any ideas? Would be much appreciated. If I can't resolve it like this, I will have to try reinstalling spunk from scratch moving the configuration to the vanilla installation to see if it works in the new installation. thanks mading   ... View more

Hi, I'm using Splunk 8.0.3 with DB connect 3.3.0. After the installation of DB connect, I'm trying to configure DB connect. However, the "welcome" screen keeps "loading" and stays blank: http://localhost:8000/de-DE/app/splunk_app_db_connect/ftr#/welcome Any suggestions? I couldn't find anything using google/ splunk answers. thanks! ... View more

Hi, I'm using snmp_ta with the newest version 1.5 with an eval key. We have set up the snmp configuration in splunk successfully. The stanza looks as follows: [snmp://OtcsMaThreadPerformance] activation_key = 91C3A8052D3B6BB033AC165FDF24462E destination = host do_bulk_get = 0 do_get_subtree = 1 index = otcs ipv6 = 0 mib_names = MONITORING_AGENT_MIB object_names = .1.3.6.1.4.1.14876.4.2.1.1 port = 162 response_handler = MonitoringAgentResponseHandlerThread snmp_mode = attributes snmp_version = 2C snmpinterval = 60 sourcetype = OtcsMaThreadPerformance split_bulk_output = 1 trap_rdns = 0 v3_authProtocol = usmHMACMD5AuthProtocol v3_privProtocol = usmDESPrivProtocol host = host disabled = 0 I can see that Splunk is receiving specific data (such as host name information), but all other information has 0 values. see screenshot: https://ibb.co/Zg6BzrJ In the past, I managed to configure snmp for this solution, so I have working examples. ... View more

Hi, I'm using splunk 6.6.7 with a purchased license. I want to upgrade to Splunk 8.0.1. Will I have to contact Splunk to get the license converted for Splunk 8.0.1 and onwards or will it work with it? I want to upgrade Splunk inplace which means I will install it over the existing version 6.6.7. Thanks! ... View more