About AMAN0113

AMAN0113 · ‎02-18-2024

We are planning to migrate a server that plays multiple roles as a DS, HEC, Proxy, SC4S, Syslog etc., to multiple servers by possibly trying to split the roles. Eg; server A to play DS role, server B to take care of HEC Services and so on. What would be the easiest approach to achieve this? Seems like a lot of work. Would it be recommended to do so in the first place? What are the criteria we should have in mind while doing this migration.

AMAN0113 · ‎02-01-2024

Is there a way to do this already? Stuck at the exact same point.

AMAN0113 · ‎10-23-2023

Hi @nareshkumarg, Did you find a solution to the above? If so, could you please let me know what you found?

AMAN0113 · ‎10-01-2023

Hi, I want to restrict access to different teams based on hosts but don't want to do it by creating multiple indexes for this. The data would be present in one index and teams would be given access to this index, however they should be able to see only the data they own. Is there a way host-based restriction can be achieved?

AMAN0113 · ‎09-21-2023

Hi, We have a requirement to migrate ITSI Content packs to Splunk Cloud. Is it possible to achieve this? If yes, Could you please help with the list of steps to perform for this? I would also want to know what are the risks involved.

AMAN0113 · ‎09-17-2023

Hi, I'm trying to create a new account on Splunk On-Call with Global Admin permissions and share it with a group of people in the higher ups. I would like to know if there is any url (like the splunk one) to bypass SSO and login with basic credentials. The reason for this is since there will be multiple people using the same account, we don't want SSO/MFA to be set up.

AMAN0113 · ‎09-11-2023

Hi @gcusello, Thanks for your inputs. A follow up question, Do I have to expect any data loss during the upgrade? or is the add-on capable of backfilling the data lost during the time of upgrade. Also do I need to restart splunk on my server for the changes to reflect?

AMAN0113 · ‎09-10-2023

We have Splunk Add-on for Unix and Linux 8.2.0 installed and need to upgrade it to the latest version (8.10.0). Request someone to help if I can directly upgrade it to 8.10 or should there be an incremental upgrade. IS there any feature that will be affected in my existing set-up due to the upgrade. Also, what are the steps that should be taken while I perform this so as to not lose any of my existing configs. Is there any documentation for this.

Posts	8
Solutions	0
Karma Given	6
Karma Received	0
Member Since	‎09-10-2023

Online Status	Offline
Date Last Visited	‎02-27-2024 12:30 AM

Server Migration

Host-based restriction

Migrating Splunk ITSI Content packs to Splunk Clou...

Splunk On-Call SSO bypassing URL

Splunk Add-on for Unix and Linux

Server Migration

Re: How to change credentials stored in passwords....

Re: How to write API results made by splunk Alert ...

Host-based restriction

Migrating Splunk ITSI Content packs to Splunk Clou...

Splunk On-Call SSO bypassing URL

Re: Splunk Add-on for Unix and Linux

Splunk Add-on for Unix and Linux