About SplunkNewb

SplunkNewb · ‎07-12-2021

I'm currently running splunk 6.6.2

SplunkNewb · ‎07-12-2021

I have looked at the configs files and they are configured the same however. im seeing the error below in the logs : ERROR [140550481172224] (CaptureServer.cpp:2295) stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=*********.tracfone.com status=504

SplunkNewb · ‎10-26-2020

I have created a folder under /opt/splunkforwarder/etc/apps called tracfone_SHF_passwordmask_props with SEDCMD-maskPassword = s/PasswordText\">(?<aaa>[^<]*)/PasswordText\">*****/g. However this is not working. Should this props be added under /opt/splunkforwarder/etc/apps/tracfone_forwarders_streamunder /opt/splunkforwarder/etc/apps/tracfone_forwarders_stream

SplunkNewb · ‎10-22-2020

I have stream source data which goes over the Nexus xx then over the (Gigamon) network then to a stream (Linux)forwarder. However sensitive data are not being masked. Please advise what would need to done to mask such data.

Posts	4
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎10-22-2020

Online Status	Offline
Date Last Visited	‎07-14-2021 01:51 AM

Stream server for one host is not working but is w...

Masking stream data before indexing

Re: Stream server for one host is not working but ...

Stream server for one host is not working but is w...

Re: Masking stream data before indexing

Masking stream data before indexing