Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About phamanth
phamanth
Explorer
Member since:
03-28-2017
01-08-2025
Community Statistics
| Posts | 7 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 03-28-2017 |
Activity Feed
- Posted Changing from ProxySSO authentication to SAML on Splunk Enterprise. 01-07-2025 11:09 AM
- Posted Re: Umbrella Cisco-managed s3 bucket sync only working manually on All Apps and Add-ons. 07-15-2020 09:11 AM
- Posted Umbrella Cisco-managed s3 bucket sync only working manually on All Apps and Add-ons. 07-13-2020 03:37 PM
- Posted Re: App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 05-05-2020 07:06 PM
- Posted Re: App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 05-05-2020 09:57 AM
- Posted Re: App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 05-05-2020 08:46 AM
- Posted App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 04-29-2020 08:51 AM
- Tagged App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 04-29-2020 08:51 AM
- Tagged App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 04-29-2020 08:51 AM
- Tagged App for windows infrastructure domain drop downs not populating among other on All Apps and Add-ons. 04-29-2020 08:51 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
01-07-2025
11:09 AM
Inherited Splunk deployment. Looks like authentication was setup with proxysso. I am unfamiliar with this and we are planning on migrating the proxysso authentication to SAML. In the past, I have used the web UI for authentications like LDAP. ProxySSO seems to be a backend conf file? Not sure on how to proceed if there will be a conflict of just adding the SAML authentication method and will it simply override the ProxySSO configurations? Or does the ProxySSO conf need to be removed first and then saml configured? If that is the case, what methods to remove? Thank you
... View more
Labels
- Labels:
-
configuration
07-15-2020
09:11 AM
Figured it out. Silly mistake of forgetting about script running in a different shell that may or may not have environmental variables for proxy.
... View more
07-13-2020
03:37 PM
Using the details in the cisco umbrella add-on for splunk. The pull-umbrella-logs.sh runs fine manually as the user, splunk. The sync will connect and pull logs with no issue. However, when left to run automated via splunk local inputs.conf. It cannot connect and fails to ingest any data. Splunkd log entry: ERROR ExecProcessor - message from "/opt/splunk/etc/apps/TA-cisco_umbrella/bin/pull-umbrella-logs.sh" fatal error: Could not connect to the endpoint URL As far as I can tell, splunk should be the using the same user (splunk) in order to run the script automatically. What might I be missing?
... View more
Labels
- Labels:
-
troubleshooting
05-05-2020
07:06 PM
Yes, Currently, looking into the inputs.conf file from the TA-WIndows, As there are monitors that are disabled such as Directory service and File Replication service. If enabled, would that fix the problem?
... View more
05-05-2020
09:57 AM
The universal forwarder on the domain controller does not have SA-ldapsearch, only app deployed is TA-windows. SA-ldapsearch is only on the search head.
... View more
05-05-2020
08:46 AM
No prerequisites were skipped. The splunk supporting add-on for active directory is installed on the search head
... View more
04-29-2020
08:51 AM
Domain controllers have a forwarder with the TA-Windows deployed via server class. Splunk App for Windows Infrastruture on the search head. We get wineventlog, some AD user record changes, logins, etc. However, Things like domain controller health and OU, nor domain drop downs in some dashboards are not populating. During the detect features configuration, Domains, Domain Controllers, and DNS do not get detected.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-08-2025
01:49 AM
|
