good day I am currently using Splunk Cloud Version: 9.0.2208.4, when using the Carousel Viz visualization it works normally on any dashboard, but when I add the script="simple_xml_examples:tokenlinks.js" reference to use dashboards via token I get an error "Error rendering Carousel Viz visualization", has anyone else experienced this? previously used it in splunk enterprise without any problem Regards ... View more

I currently have splunk forwarder 9.0 installed on my windows 11 computer, sync a folder that has files from OneDrive with the following structure [batch://C:\Users\esnsanma\Documents\OneDrive - Carvajal S.A\ReportesNdd\8001466435\*] disabled = false index = idx_ndd_group sourcetype = st_ndd_congroup crcSalt = <SOURCE> move_policy = sinkhole every time I restart my computer it stops detecting the files, for example I start my computer but it doesn't index the files, it only detects them until I copy and paste the files on the same folder, there is a command to force the indexing of the entire tree of folders ... View more

Good day  I have a splunk 8.2.3 onpremise instance, apparently my system does not want to start, when I execute manual start it gives me the following [root@srvsplunk ~]# systemctl status -l splunk ● splunk.service - SYSV: Splunk indexer service Loaded: loaded (/etc/rc.d/init.d/splunk; bad; vendor preset: disabled) Active: failed (Result: exit-code) since Wed 2022-07-06 16:23:25 -05; 12min ago Docs: man:systemd-sysv-generator(8) Process: 1495 ExecStart=/etc/rc.d/init.d/splunk start (code=exited, status=127) Jul 06 16:23:25 srvsplunk splunk[1495]: Checking kvstore port [8191]: /opt/splunk/bin/splunkd: error while loading shared libraries: libjemalloc.so.2: cannot open shared object file: No such file or directory Jul 06 16:23:25 srvsplunk splunk[1495]: /opt/splunk/bin/splunkd: error while loading shared libraries: libjemalloc.so.2: cannot open shared object file: No such file or directory Jul 06 16:23:25 srvsplunk splunk[1495]: open Jul 06 16:23:25 srvsplunk splunk[1495]: /opt/splunk/bin/splunkd: error while loading shared libraries: libjemalloc.so.2: cannot open shared object file: No such file or directory Jul 06 16:23:25 srvsplunk splunk[1495]: /opt/splunk/bin/splunkd: error while loading shared libraries: libjemalloc.so.2: cannot open shared object file: No such file or directory Jul 06 16:23:25 srvsplunk splunk[1495]: SSL certificate generation failed. Jul 06 16:23:25 srvsplunk systemd[1]: splunk.service: control process exited, code=exited status=127 Jul 06 16:23:25 srvsplunk systemd[1]: Failed to start SYSV: Splunk indexer service. Jul 06 16:23:25 srvsplunk systemd[1]: Unit splunk.service entered failed state. Jul 06 16:23:25 srvsplunk systemd[1]: splunk.service failed. how can i fix my splunk system?? Thanks ... View more

Good day I would like to know how this type of alert can be solved in the security analyzes in a particular app, do you know something about the subject, we have a linux red hat in house server to maintain the service through a public IP Regards ... View more