About sternbernard

sternbernard · ‎09-13-2022

Thanks. Just seen the Splunk_TA_windows app is 4.8.4, so I'm assuming thats the problem.

sternbernard · ‎09-13-2022

Our Splunk environment is producing many Windows eventlog entries with broken sourcetypes. When looking at the source log line, it's clear with no strangeness, but the sourcetype appears broken. I've been through the deployment server inputs.conf and transforms.conf but can't see anything obvious. Is there anything I'm missing?

sternbernard · ‎08-19-2022

Thanks I was going off the README.txt and release.md, I assumed they would have been updated, as the README.txt is my usual first port of call. Checking app.conf it does reflect the proper version. Seems like it's lazy devs.

sternbernard · ‎08-19-2022

I'm looking at downloading the "Cisco Secure eStreamer Client Add-On for Splunk" app, but when I do, instead of version 5.0.3 (suitable for Splunk 8.1 and 8.2) I get version 3.5.2 (suitable for Splunk 7.0, and 7.1). Is this Splunk or the uploaders issue?

Posts	4
Solutions	2
Karma Given	1
Karma Received	0
Member Since	‎08-19-2022

Online Status	Offline
Date Last Visited	‎11-30-2022 03:27 PM

Why are there strange characters in sourcetype?

"Cisco Secure eStreamer Client Add-On for Splunk" ...

Re: Strange Characters in sourcetype.

Why are there strange characters in sourcetype?

Re: Downloaded app not as described.

"Cisco Secure eStreamer Client Add-On for Splunk" ...