About tro

tro · ‎03-13-2023

You you are having same issue, then it is fixed in version Splunk 9.0.4. Please do update 😉

tro · ‎01-02-2023

I got this answer via official Splunk support: Ticket raised to our developers: SPL-229404. In general fix in new app version was already implemented. But app is still not ready to be released due to some other things which have to be tested. Unfortunately I don't have any specific ETA for now but I believe it should not take too long. So I would suggest watch SPL-229404 in upcoming changelogs.

tro · ‎12-02-2022

Same issue 😕

tro · ‎11-21-2022

I'm so disappointed by Splunk release process that they even don't run "splunk btool check" in their testing pipelines to catch this kind of errors 🙄.

tro · ‎10-18-2022

Query is not working anymore.

tro · ‎10-11-2022

You are right that with latest version (4.0.2) of upgrade readiness app is everything OK. Thanks for your assistance.

tro · ‎10-03-2022

Very good script, but when your destination folder is symlink then it won't work. To fix it, add -L for each find command in that script 😉.

tro · ‎09-26-2022

Thank for the prompt info and BTW, upgrade readiness app is even native app from Splunk 9.x 😉.

tro · ‎09-26-2022

Hello users, it seems that TA-webtools app is not fully compatible with Splunk 9 version according to "Upgrade Readiness App": Will you upgrade it? Thank you!

tro · ‎09-23-2022

@richgalloway wrote: I believe the Monitoring Console has a dashboard panel that will provide that information. If you want to do it yourself, try this variation of your query. index=win_test sourcetype=* | bucket _time span=1h | stats sum(eval(len(_raw)) as bytes by _time | stats avg(bytes) as avgBytes | eval avgMB=avgBytes/1024/1024 | rename avgMB as "Ave MB per Hour" You query contains mismatched parenthesis on `sum` line.

tro · ‎09-22-2022

Some app doesn't have that support, for example: ERROR ApplicationUpdater - Error reloading Splunk_TA_stream: handler for server (http_post /replication/configuration/whitelist-reload): Configuration from app=Splunk_TA_stream does not support reload: server.conf/[diag]/EXCLUDE-key

tro · ‎04-07-2022

Is there any new way how to do it with recent Splunk version?

tro · ‎12-08-2021

Hey, is it possible that you are running this addon on server with old OS or Splunk software? Try update your OS and/or Splunk to solve this problem.

tro · ‎06-28-2021

There are some solutions like this or this.

tro · ‎06-28-2021

Hello, here you can find a steps which must be taken to setup distributed mode: https://community.splunk.com/t5/Monitoring-Splunk/Turn-on-Monitoring-Console-Distributed-Mode-via-CLI-or-REST/m-p/408405/highlight/true#M3504

Posts	15
Solutions	0
Karma Given	55
Karma Received	6
Member Since	‎05-06-2021

Online Status	Offline
Date Last Visited	3 weeks ago

TA-webtools isn't Splunk 9 compatible, can it be u...

Re: Invalid Key in alert_actions.conf after upgrad...

Re: Invalid Key in alert_actions.conf after upgrad...

Re: Could not load lookup=LOOKUP-splunk_security_e...

Re: Invalid Key in alert_actions.conf after upgrad...

Re: Monitor rolling restart time

Re: TA-webtools isn't Splunk 9 compatible

Re: Why is the knowledge bundle directory filling ...

Re: TA-webtools isn't Splunk 9 compatible

TA-webtools isn't Splunk 9 compatible, can it be u...

Re: Estimate Volume of Average Events Per Hour (in...

Re: Restart a splunk app via script

Re: Saved searches export/import REST API

Re: Stopped receiving logs from Okta. Using "Okta...

Re: How to configure Monitoring console via CLI or...

Re: How to enable monitoring console via command l...