About dompico

dompico · ‎06-04-2025

Hello, This is installed directly on the splunk cloud instance. I just started using splunk about a week ago. To my knowledge, I don't have cli access to modify any files. I also don't see why I would need to, as there is no mention of a need to in the instructions. They seem to have built everything you would need into the app configuration pages such as fields to input api key and whatnot. I also found the thread you mentioned, but it seems no one was able to come up with a solution then either.

dompico · ‎06-04-2025

Hello, I only have this one app from S1 installed on the indexer/searchhead which is in Splunk cloud.

dompico · ‎06-03-2025

Hello, I'm trying to get SentinelOne data into my cloud instance but I'm getting errors similar to this related to the inputs. At first I was having an issue with authentication errors using the API. I believe that's resolved after regenerating the key, because these are the only logs I can see in the index I created for S1. error_message="[HTTP 404] https://127.0.0.1:8089/servicesNS/nobody/sentinelone_app_for_splunk/configs/conf-authhosts/********?output_mode=json" error_type="<class 'splunk.ResourceNotFound'>" error_arguments="[HTTP 404] https://127.0.0.1:8089/servicesNS/nobody/sentinelone_app_for_splunk/configs/conf-authhosts/***********?output_mode=json" error_filename="s1_client.py" error_line_number="162" input_guid="*****************" input_name="Threats"

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎06-03-2025

Online Status	Offline
Date Last Visited	‎06-10-2025 01:22 PM

SentinelOne App Errors

Re: SentinelOne App Errors

Re: SentinelOne App Errors

SentinelOne App Errors

Are you a member of the Splunk Community?

SentinelOne App Errors

Re: SentinelOne App Errors

Re: SentinelOne App Errors

SentinelOne App Errors