cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
mkirda1
Explorer
Member since: ‎08-30-2022
‎12-28-2022
Community Statistics
Posts 3
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎08-30-2022
View All

Re: Splunk App for Salesforce: no data showing in ...

by in All Apps and Add-ons
‎11-14-2022 07:51 AM
‎11-14-2022 07:51 AM
As far as I can tell, this app does not function.  I base this on extensive troubleshooting with Splunk tech support.  There is no support. It doesn't work.  Personally I believe it should be removed from Splunkbase.  ... View more

Re: Has anyone gotten the Splunk Salesforce app to...

by in All Apps and Add-ons
‎11-04-2022 07:38 AM
‎11-04-2022 07:38 AM
Ultimately the dashboards do not work. When I look at the source, this is the query:  index=sfdc eventtype=sfdc-login-history Application=Browser |stats count by UserType| sort - count | eval label=UserType." (".count.")"  (I added the index=sfdc to it as this is where the data resides.) When in the main search and reporting context, I get results. However when in the Salesforce app context, we see this error:  I do get results in the Search and reporting context, but when I run it in the Salesforce app context, I get the following @johnhuang: Any help here from someone who has gotten it working would be highly appreciated. Regards. Mike Kirda ... View more

Has anyone gotten the Splunk Salesforce app to wor...

by in All Apps and Add-ons
‎10-31-2022 08:10 AM
‎10-31-2022 08:10 AM
Worked extensively with Splunk support on this. They believe that the problem is that the app is either fundamentally incompatible with Splunk 9 or the latest Salesforce TA.  Ultimately splunk-app-sfdc is using the collection lookup_sfdc_usernames_kvstore which is not defined in the collections.conf of the app, but in the add-on. It looks like the app is trying to refer to that and is not able to find that lookup.  ERROR KVStoreProvider [29936 SchedulerThread] - Could not create KvStore Lookup failed because collection 'lookup_sfdc_usernames_kvstore' in app 'splunk-app-sfdc' does not exist, or user 'splunk-system-user' does not have read access. Hence my question: Has anyone gotten this to actually work? If so, what is the trick?  Regards. Mike Kirda   ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎12-28-2022 07:44 PM
Karma given to
View All