Hi team, How to do certificate monitoring using splunk. Certificates are on windows and Linux machines. Thanks  ... View more

Hello, Can we create either of the breaking criteria for the episodes in Splunk itsi. We do have bidirectional ticketing enabled but if the external ticket is not closed then episode is remained open, so we are need of creating a breaking criteria. Will it impact the bidirectional ticketing if we enable breaking criteria?     ... View more

Hi, We have created the aggregation policies and configure the action rules to create a ticket. We have a requirement to prevent the ticket getting created for few of the hosts. How to define the filtering criteria to exclude the hosts so that the ticket will bot be created for them? and will the episodes get created in this case? Please clarify. Thanks. ... View more

Hi , How to extract the open episodes with service now incident against each episode in Splunk itsi Thanks!   ... View more

Hi, How can we extract a list of open episodes in splunk itsi.Please  Thanks! ... View more

Hi, We have a requirement to install the Splunk add on for sql server. We are using Splunk cloud with classic experience. Where all do we need to install this add on? is it sufficient to install on the search head? Or it has to be installed on the heavy forwarder also? Please clarify. Docs suggest to install on the search head only as the below table. Splunk instance type Supported Required Comments Search Heads Yes Yes Install this add-on to all search heads where Microsoft SQL Server knowledge management is required. Indexers Yes No Not required, because this add-on does not include any index-time operations. Heavy Forwarders Yes No To collect dynamic management view data, trace logs, and audit logs, you must use Splunk DB Connect on a search head or heavy forwarder. The remaining data types support using a universal or light forwarder installed directly on the machines running MS SQL Server. Universal Forwarders Yes No To collect dynamic management view data, trace logs, and audit logs, you must use Splunk DB Connect on a search head or heavy forwarder. The remaining data types support file monitoring using a universal or light forwarder installed directly on the machines running MS SQL Server. ... View more

Hi,   How to suppress the notable events in Splunk itsi ? And when an episode breaks will the related notable events gets cleared?  And when an new episode gets created the related notable events count will be a fresh count from the time of episode creation or it will be a accumulated from the previous count. Please clarify. Thanks! ... View more

Hello All, We have a requirement of integration of Dynatrace (SAAS service) and Splunk 8.0.0(On Premise). Currently we have installed the Dynatrace App and Dynatrace Add-on from Splunk base ,defined 2 new indexes, configured the inputs for events and metrics as well using the URL of Dynatrace SAAS service, token and default port from API management of Dynatrace However we are not able see the data flow. Kindly suggest please. The port which is used in inputs is a default port  from API management of Dynatrace, should that port be opened on the Splunk (on premise) server? And if we use HEC to get the data , the default port is 8088 , should that also be opened on the Splunk (on premise) server?   ... View more