Hi, We are trying to integrate gmail logs into our Splunk Cloud instance.  We have tried the 'Splunk Addon for Google Workspace(https://splunkbase.splunk.com/app/5556/)'. The integration was smooth, and we were able to see gsuite header logs in Splunk. But the problem in this case was it eventually generated large bills from Google for the bigqueries. Hence we were forced to disable it temporarily. When we did an analysis, we found that the current approach in this addon is to query all partition at once using the below query: "SELECT * FROM `{gcp_project_id}.gmail_logs_dataset.daily_*` "                     "WHERE event_info.timestamp_usec > {start_time_usec} "                     "AND event_info.timestamp_usec < {end_time_usec} "                     "ORDER BY event_info.timestamp_usec ASC" Instead of querying the whole partition, we would like to query the table of each day, it would massively reduce the cost.  I did raise a support ticket with Splunk on this, and they have confirmed it requires a code change and they cannot assure any timeline for this. Even though we tried to manually edit this part of code and upload it via custom app, it didnt succeed the vetting process.  It would be really helpful if someone could provide me an alternate solution for integrating gmail logs or a way to upload the modified addon. Much appreciated, Archa ... View more

Hi, We are trying to integrate Splunk Cloud with our Atlassian Jira cloud instance. We have configured the app 'Jira Service Desk Simple Add-On'(https://splunkbase.splunk.com/app/4958/) and under 'Trigger Actions' I am able to see this action and also able to create/open ticket in Jira via this option. But I want to create ticket in Jira manually via splunk query using 'sendalert' command. When I tried to do, I'm getting the error 'Error in 'sendalert' command: Alert script returned error code 3.'  May be the fields that I'm providing is not correct. Could someone help me in fixing the issue that I'm facing. |sendalert jira_service_desk jira_account="JiraCloud" projectKey=“SOR” summary=“My Header” issueTypeName=“Task” priority=“Medium”  labels="Security"  It would be great if someone could provide me the fields that I should mention as part of this query inorder to create a ticket in Jira cloud. ... View more

We are using the alert manager app in our environment to add incident workflows to Splunk. After updating our Splunk Cloud to the latest Cloud version, we are facing an error while trying to access the alert manager settings page. Error:  'A custom JavaScript error caused an issue loading your dashboard. See the developer console for more details.’ We have already reached out to Splunk support to fix this issue. We have tried all the workarounds that they have mentioned to fix the compatibility issue of dashboards that use custom JavaScript with jQuery 3.5 or higher. But it did not help. It would be great if someone could help me in fixing this issue .. Alert Manager Incident Settings page Source code ... View more