Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About raz_gp
raz_gp
Explorer
Member since:
12-11-2019
04-09-2024
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 4 |
| Karma Received | 0 |
| Member Since | 12-11-2019 |
Activity Feed
- Posted Re: ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute on All Apps and Add-ons. 04-09-2024 02:42 AM
- Karma Re: ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute for marnall. 04-09-2024 02:42 AM
- Posted Splunk_TA_paloalto on All Apps and Add-ons. 04-08-2024 05:55 AM
- Tagged Splunk_TA_paloalto on All Apps and Add-ons. 04-08-2024 05:55 AM
- Posted ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute co on All Apps and Add-ons. 04-05-2024 05:56 AM
- Tagged ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute co on All Apps and Add-ons. 04-05-2024 05:56 AM
- Posted Re: ERROR ExecProcessor [ ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/signin_att on Getting Data In. 04-02-2024 06:07 AM
- Posted ERROR ExecProcessor [ ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/signin_attempt on Getting Data In. 03-26-2024 04:57 AM
- Karma Re: Unable to connect to license master since certification modifications for securiteinforma. 01-04-2024 06:15 AM
- Posted Re: french timestamp not understood on Getting Data In. 12-22-2023 01:14 AM
- Posted Re: Issues fetching Exchange Online message tracking logs (HTTP 401 Client Error) since 1.4.2023 on All Apps and Add-ons. 11-06-2023 03:15 AM
- Posted Re: Timeout when configuring Proofpoint TAP SIEM Modular Input on Getting Data In. 10-26-2023 07:00 AM
- Karma Re: Why am I getting a server error on login page with splunkd.log showing "reason=bad-cval" after upgrade to 6.2.2? for felipetesta. 05-16-2023 05:06 AM
- Karma getting timeout errors after install dropbox v2 app,getting read timeout errors with v2 app for greggernigant. 06-05-2020 12:51 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
04-09-2024
02:42 AM
Correct. I had a different user. Created an admin one and the error went away.
... View more
04-08-2024
05:55 AM
Updated the Slunk Palo alto app on a search head and i`m getting these error messages in the _internal index. Any clues? Splunk_TA_paloalto 8.1.1 Splunk core 9.0.3 04-08-2024 12:49:40.061 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=aperture: /opt/splunk/etc/apps/Splunk_TA_paloalto/bin/splunk_ta_paloalto/aob_py3/solnlib/packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.26.13) or chardet (3.0.4) doesn't match a supported version! 04-08-2024 12:49:40.061 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=aperture: RequestsDependencyWarning) 04-08-2024 12:49:40.969 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=autofocus_export: /opt/splunk/etc/apps/Splunk_TA_paloalto/bin/splunk_ta_paloalto/aob_py3/solnlib/packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.26.13) or chardet (3.0.4) doesn't match a supported version! 04-08-2024 12:49:40.969 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=autofocus_export: RequestsDependencyWarning) 04-08-2024 12:49:59.031 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=cortex_xdr: /opt/splunk/etc/apps/Splunk_TA_paloalto/bin/splunk_ta_paloalto/aob_py3/solnlib/packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.26.13) or chardet (3.0.4) doesn't match a supported version! 04-08-2024 12:49:59.031 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=cortex_xdr: RequestsDependencyWarning) 04-08-2024 12:50:00.762 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=iot_security: /opt/splunk/etc/apps/Splunk_TA_paloalto/bin/splunk_ta_paloalto/aob_py3/solnlib/packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.26.13) or chardet (3.0.4) doesn't match a supported version! 04-08-2024 12:50:00.762 +0000 ERROR ModularInputs [2488837 MainThread] - <stderr> Introspecting scheme=iot_security: RequestsDependencyWarning) OS is ubuntu fully patched.
... View more
- Tags:
- Splunk_TA_paloalto
Labels
- Labels:
-
upgrade
04-05-2024
05:56 AM
I recently updated the apps on a dev search head and got this new error showing up in my _internal logs. I don`t have any inputs configured currently in the add-on . Has anyone else seen this ? root@raz-spldevsh:/opt/splunk/etc/apps# tail -n5000 /opt/splunk/var/log/splunk/splunkd.log |grep -E "ERROR" 04-05-2024 11:26:08.663 +0000 ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute command /opt/splunk/bin/python3.7 /opt/splunk/etc/apps/splunk_ta_o365/bin/conf_migration.py 04-05-2024 11:26:08.686 +0000 ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute command /opt/splunk/bin/python3.7 /opt/splunk/etc/apps/splunk_ta_o365/bin/conf_migration.py 04-05-2024 11:26:08.699 +0000 ERROR ExecProcessor [690962 ExecProcessor] - Invalid user admin, provided in passAuth argument, attempted to execute command /opt/splunk/bin/python3.7 /opt/splunk/etc/apps/splunk_ta_o365/bin/conf_migration.py Splunk 9.0.3 App version: 4.5.1
... View more
- Tags:
- splunk_ta_o365
Labels
- Labels:
-
upgrade
04-02-2024
06:07 AM
Response received form support: This issue is currently being raised with our internal teams to look into changing the behavior of these checks in a future release of the app to avoid this error from appearing in the logs. Looking at the options available in Splunk regarding the application, there does not seem to be a way to limit the polling frequency, that in turn would reduce the number of errors appearing.
... View more
03-26-2024
04:57 AM
Statement: You install 1Password Events Reporting for Splunk from https://splunkbase.splunk.com/app/5632 Problem: You get error messages after correctly configuring it in the _internal index like: 03-26-2024 11:37:30.974 +0000 ERROR ExecProcessor [12044 ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/audit_events" 2024/03/26 11:37:30 [DEBUG] POST https://events.1password.com/api/v1/auditevents
03-26-2024 11:37:27.672 +0000 ERROR ExecProcessor [12044 ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/signin_attempts" 2024/03/26 11:37:27 [DEBUG] POST https://events.1password.com/api/v1/signinattempts
03-26-2024 11:37:23.259 +0000 ERROR ExecProcessor [12044 ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/item_usages" 2024/03/26 11:37:23 [DEBUG] POST https://events.1password.com/api/v1/itemusages
03-26-2024 11:37:20.561 +0000 ERROR ExecProcessor [12044 ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/audit_events" 2024/03/26 11:37:20 [DEBUG] POST https://events.1password.com/api/v1/auditevents
03-26-2024 11:37:17.440 +0000 ERROR ExecProcessor [12044 ExecProcessor] - message from "/opt/splunk/etc/apps/onepassword_events_api/bin/signin_attempts" 2024/03/26 11:37:17 [DEBUG] POST https://events.1password.com/api/v1/signinattempts How do you resolve this? The app was configured with a token, macros had indexes defined, interval for the scripted input set to a cron schedule. Splunk 9.0.3 core standalone dev env.
... View more
12-22-2023
01:14 AM
having the same issue for weekdays and month dates. Is this something that will happen or we need to fix it ourselves creatively ? mer. 13 déc. 2023 23:31:20 CET file_hash=96def1... mar. 19 déc. 2023 22:06:55 CET user=x ... mar. 19 déc. 2023 09:16:13 CET user=y ...
... View more
11-06-2023
03:15 AM
re @Wiessiet I also looked at that for a while and found these 2 articles which helped me: https://www.michev.info/blog/post/3180/exchange-api-permissions-missing https://www.michev.info/blog/post/4067/modern-authentication-oauth-support-for-the-reporting-web-service-in-office-365 In short, these are the steps: To get there, App Registrations -> Select our app -> API permissions Then Add a permission -> go to APIs my organization uses -> paste: Office 365 Exchange Online -> Click the Office 365 Exchange Online API section -> then Application permissions Paste the ReportingWebService.Read.All permissions and tick it + approve afterwards. It took me a while as well. + the Global reader permission addition from Roles & admins -> Global Reader -> add assignments -> paste the app name and grant your app the role rights... https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/manage-roles-portal
... View more
10-26-2023
07:00 AM
Same issue. +0000 ERROR ModularInputs [18816 TcpChannelThread] - Argument validation for scheme=proofpoint_tap_siem: killing process, because executing it took too long (over 30000 msecs). For me , i saw this was an OS issue. On Ubuntu the input works, the Redhat boxes dont so ..
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-09-2024
10:13 AM
|
