About shakti

shakti · ‎05-22-2024

Hello, I am getting the following error while trying to enable SAML for my deployment server : Verification of SAML assertion using the IDP certificate provided failed. Unknown signer of SAML response. Kindly provide any valuable suggestions

shakti · ‎05-07-2024

@gcusello Thank you for your reply The IOPS of indexers and search heads is between 50 -300 ...I guess its pretty less ...May I know do you have any suggestions how to improve on it?

shakti · ‎05-06-2024

Also , if i may know what should be the good I/O operations for splunk?

shakti · ‎05-06-2024

@gcusello Appreciate your reply.... we have indexer clustering environment . However for both indexers and search head we are using only 4 CPU physical cores ..Do you think that can cause this problem?

shakti · ‎05-05-2024

Hello , The Forwarder ingestion latency is showing red on my search head.... Root Cause(s): Indicator 'ingestion_latency_gap_multiplier' exceeded configured value. The observed value is 5474815. Message from 452CE67F-3C57-403C-B7B1-E34754172C83:10.250.2.7:3535 Can anyone please provide any suggestions?

shakti · ‎04-28-2024

Hello, Can anyone please provide me a search query to display the cpu usage regarding splunk instances like indexer, search head , deployment server etc?

shakti · ‎04-23-2024

Hello, Can anyone help me with the query that lists all the savedsearches in my splunk system along with the time taken by them to run completely?

shakti · ‎04-21-2024

I am getting the following error : command="sendemail", (*****SMTP; Client was not authenticated to send anonymous mail during MAIL FROM', '*****.com') while sending mail to: it-security@durr.com

shakti · ‎04-17-2024

Also , i have the following error which is generated for only one previous alert , if you could please look and see what other steps I can take , if that helps 2024-04-18 05:18:47,938 +0000 ERROR sendemail:187 - Sending email. subject="Splunk Alert: ITSEC_Backup_Change_Alert", encoded_subject="Splunk Alert: ITSEC_Backup_Change_Alert", results_link="*****", recipients="['it-security@durr.com']", server="********" @marnall

shakti · ‎04-17-2024

Yes absolutely , the new alerts or reports that I am creating is unable to get notified through emails...If you have any suggestion kindly help

shakti · ‎04-17-2024

Hello , I have put the smtp server name in my email settings in splunk...but the issue is a bit complex , all the previous alerts/reports are coming on time which are created on splunk but only the one created by me lately are not coming .. Any suggestions?

shakti · ‎04-16-2024

Hello, The UI of my search head is not loading ...I am seeing only a white screen with no error message as such ..Splunkd is also running ...Kindly suggest?

shakti · ‎04-14-2024

I am using outlook as the external mail server ..Do you have any idea what value should I use in that mail server hostname?

shakti · ‎04-14-2024

Hello, I am facing same issue as you ...I am not receiving email alerts from splunk ....Instead of localhost what name should I kept for mail server host name? Could you please suggest

shakti · ‎04-14-2024

@marnall after using your query I am getting error message as " connection refused" in my search results.. Should I change my localhost to something else in the mail server hostname in email settings in splunk UI ?Please do let me know

shakti · ‎04-13-2024

Thank you for your reply ... The email settings are fine and in internal logs I don't see any error related to "sendemail"...Could you please suggest what else could be done?

shakti · ‎04-13-2024

Hello, I am not getting emails regarding the alerts I have setup in splunk ...Can anyone please help?

shakti · ‎03-18-2024

Hello, Can anyone please provide me a solution for the error that I am getting in the Configuration section of my TA-dmarc addon for splunk. Error: Configuration page failed to load, the server reported internal errors which may indicate you do not have access to this page. Request failed with status code 500

shakti · ‎03-11-2024

<panel> <html> <div class="modal $tokShowModel$" id="myModal" style="border-top-left-radius:25px; border-top-right-radius:25px;"> <div class="modal-header" style="background:#e1e6eb; padding:20px; height:10px;"> <h3>Message:</h3> </div> <div class="modal-body" style="padding:30%"> <p style="color:blue;font-size:16px;"> This dashboard has been moved to azure. Kindly visit the following link - <a href="https://mse-svsplunkm01.emea.duerr.int:8000/en-US/app/GermanISMS/kpi_global_v5">Go here </a> </p> </div> </div> </html> </panel> I have created this code which displays the pop up but the splunk dashboard is still working on the background ...Can anyone please help me with an idea about any script that I can add in this code to make the dashboard stop working in the background as well as the pop up should also display...

shakti · ‎03-11-2024

Hello Kiran, <panel> <html> <div class="modal $tokShowModel$" id="myModal" style="border-top-left-radius:25px; border-top-right-radius:25px;"> <div class="modal-header" style="background:#e1e6eb; padding:20px; height:10px;"> <h3>Message:</h3> </div> <div class="modal-body" style="padding:30%"> <p style="color:blue;font-size:16px;"> This dashboard has been moved to azure. Kindly visit the following link - <a href="https://mse-svsplunkm01.emea.duerr.int:8000/en-US/app/GermanISMS/kpi_global_v5">Go here </a> </p> </div> </div> </html> </panel> I have created this code which displays the pop up but the dashboard is still working on the background ...do you have any idea about any script that I can add in this code to make the dashboard stop working in the background.

shakti · ‎03-06-2024

Hello, May I please know how to display a popup as soon as the dashboard opens? If there is any HTML code or a JS file for it please do let me know .....You valuable suggestions are required...

shakti · ‎03-05-2024

I am trying to create a popup that should open as soon as you click on the link of the dashbaord ...However on entering the html code I am getting the following error - "Entity 'times' not defined" ...Can anyone please tell me how to fix this issue ? It is a bit urgent so a quick help would be appreciated a lot....and here is the tag : <span class="close">×</span>

shakti · ‎03-04-2024

Can anyone please provide me .js file for displaying a popup in my splunk dashboard.. ?

shakti · ‎03-03-2024

@gcusello Could you please reply to my query as mentioned previously?

shakti · ‎02-26-2024

Invalid key in stanza [WSUS_vUpdateInstallationInfo] in /opt/splunk/etc/apps/splunk_app_db_connect/local/db_inputs.conf, line 140: is_template (value: 0). Invalid key in stanza [WSUS_vUpdateInstallationInfo] in /opt/splunk/etc/apps/splunk_app_db_connect/local/db_inputs.conf, line 141: use_json_output (value: 0). can anyone please suggest what valid keynames can I use in place of these two? also, this problem has occured after migration and upgradation

Posts	30
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎02-01-2024

Online Status	Offline
Date Last Visited	‎05-23-2024 01:31 AM

Deployment server

splunk

query

query

search head

Cannot send email alerts

alert

splunk

Splunk dashboard

How to add a pop-up to a dashboard?

Deployment server

Re: splunk

Re: splunk

Re: splunk

splunk

query

query

Re: alerts

Re: alerts

Re: alerts

Re: alerts

search head

Re: alerts

Cannot send email alerts

Re: alert

Re: alert

alert

Re: Splunk

splunk

Re: splunk

Splunk dashboard

How to add a pop-up to a dashboard?

splunk

Re: Splunk

splunk

Are you a member of the Splunk Community?