Hi Team, we facing issue in our environment, as Episodes are not generating after upgrading of ITSI 4.17.1 version. And everything is enabled (Services, Correlation searches, NEAP policies) and even though it is not creating. ITSI_event_grouping is enabled and Rules engine is working fine. Please provide solution for this. ... View more

Hi  We are facing below error while Run the search in search head. This is coming frequently and unable to solve it. We have checked bundle size & Network connectivity between Indexer & Search heads. All looks good but still getting this below error. Please check and provide me hopeful solution on this. Unable to distribute to peer named uswaa-dopsidt01.cgdop.com at uri https://XXXX:8089 because replication was unsuccessful. ReplicationStatus: Failed - Failure info: failed_because_BUNDLE_DATA_TRANSMIT_FAILURE. Verify connectivity to the search peer, that the search peer is up, and that an adequate level of system resources are available. See the Troubleshooting Manual for more information. ... View more

While creating HEC token through putty by using below command, we are getting error like "Couldn't request server info: Couldn't complete HTTP request: Connection refused".  Please provide any info or solution. /opt/splunk/bin/splunk http-event-collector create Appd_Splunk -uri http://<IP>:8089 -description "This is a Appd token" -disabled 1 -index toll_alrt ... View more

The below Vulnerabilities reported in linux servers and let me know if any impact on Splunk application, if we remediate the vulnerabilities based on solution provided. Amazon Linux 2 : polkit (ALAS-2022-1745) Amazon Linux 2 : libgcrypt (ALAS-2022-1769) Amazon Linux 2 : gzip, xz (ALAS-2022-1782) Amazon Linux 2 : vim (ALAS-2022-1829) Amazon Linux 2 : zlib (ALAS-2022-1849) Amazon Linux 2 : aide (ALAS-2022-1850) Amazon Linux 2 : pcre2 (ALAS-2022-1871) Amazon Linux 2 : e2fsprogs (ALAS-2022-1884) Amazon Linux 2 : sqlite (ALAS-2023-1911) Amazon Linux 2 : libtasn1 (ALAS-2023-1908) Amazon Linux 2 : freetype (ALAS-2023-1909) Amazon Linux 2 : libpng (ALAS-2023-1904) Amazon Linux 2 : python-lxml (ALAS-2023-1956) Amazon Linux 2 : nss-util (ALAS-2023-1954) Amazon Linux 2 : nss-softokn (ALAS-2023-1955) Amazon Linux 2 : python (ALAS-2023-1980) Amazon Linux 2 : cpio (ALAS-2023-1972) Amazon Linux 2 : curl (ALAS-2023-1986) Amazon Linux 2 : nss (ALAS-2023-1992) Amazon Linux 2 : babel (ALAS-2023-2010) Amazon Linux 2 : systemd (ALAS-2023-2004) Amazon Linux 2 : jasper (ALAS-2023-2018) Amazon Linux 2 : gd (ALAS-2023-2044) Amazon Linux 2 : perl (ALAS-2023-2034) Amazon Linux 2 : libwebp (ALAS-2023-2048) Amazon Linux 2 : mariadb (ALAS-2023-2057) Amazon Linux 2 : sysstat (ALAS-2023-2068) Amazon Linux 2 : rsync (ALAS-2023-2074) Amazon Linux 2 : dnsmasq (ALAS-2023-2069) Amazon Linux 2 : glusterfs (ALAS-2023-2071) Amazon Linux 2 : pcre (ALAS-2023-2082) Amazon Linux 2 : git (ALAS-2023-2072) Amazon Linux 2 : libfastjson (ALAS-2023-2079) Amazon Linux 2 : openldap (ALAS-2023-2095) Amazon Linux 2 : perl-HTTP-Tiny (ALAS-2023-2093) Amazon Linux 2 : glib2 (ALAS-2023-2107) Amazon Linux 2 : perl-Pod-Perldoc (ALAS-2023-2094) Amazon Linux 2 : ncurses (ALAS-2023-2096) Amazon Linux 2 : squashfs-tools (ALAS-2023-2152) Amazon Linux 2 : fribidi (ALAS-2023-2116) Amazon Linux 2 : tcpdump (ALAS-2023-2119) Amazon Linux 2 : libX11 (ALAS-2023-2129) Amazon Linux 2 : c-ares (ALAS-2023-2127) Amazon Linux 2 : zstd (ALAS-2023-2140) Amazon Linux 2 : SDL2 (ALAS-2023-2162) Amazon Linux 2 : bluez (ALAS-2023-2167) Amazon Linux 2 : avahi (ALAS-2023-2175) Amazon Linux 2 : nghttp2 (ALAS-2023-2180) Amazon Linux 2 : ca-certificates (ALAS-2023-2224) Amazon Linux 2 : amazon-ssm-agent (ALAS-2023-2238) Amazon Linux 2 : shadow-utils (ALAS-2023-2247) Amazon Linux 2 : libssh2 (ALAS-2023-2257) Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2254) Amazon Linux 2 : expat (ALAS-2023-2280) Amazon Linux 2 : kernel (ALAS-2023-2264) Amazon Linux 2 : flac (ALAS-2023-2283) Amazon Linux 2 : python-pillow (ALAS-2023-2286) Amazon Linux 2 : bind (ALAS-2023-2273) Oracle Java JRE Unsupported Version Detection (Unix) ... View more