Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About nyfaisal
nyfaisal
Path Finder
Member since:
04-02-2015
06-05-2020
Community Statistics
| Posts | 13 |
| Solutions | 1 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 04-02-2015 |
Activity Feed
- Karma Re: Memory Leak - Splunk 4.3.3 for lguinn2. 06-05-2020 12:46 AM
- Posted Re: Getting ServerNotFoundError when connecting to ServiceNow via proxy on All Apps and Add-ons. 08-14-2015 11:50 AM
- Posted Splunk Support for Active Directory: Why is my Active Directory lookup not working using "eval whenCreated=20150803"? on All Apps and Add-ons. 08-03-2015 08:10 AM
- Tagged Splunk Support for Active Directory: Why is my Active Directory lookup not working using "eval whenCreated=20150803"? on All Apps and Add-ons. 08-03-2015 08:10 AM
- Tagged Splunk Support for Active Directory: Why is my Active Directory lookup not working using "eval whenCreated=20150803"? on All Apps and Add-ons. 08-03-2015 08:10 AM
- Tagged Splunk Support for Active Directory: Why is my Active Directory lookup not working using "eval whenCreated=20150803"? on All Apps and Add-ons. 08-03-2015 08:10 AM
- Tagged Splunk Support for Active Directory: Why is my Active Directory lookup not working using "eval whenCreated=20150803"? on All Apps and Add-ons. 08-03-2015 08:10 AM
- Tagged Splunk Support for Active Directory: Why is my Active Directory lookup not working using "eval whenCreated=20150803"? on All Apps and Add-ons. 08-03-2015 08:10 AM
- Posted Re: splunk app for tripwire enterprise ? on All Apps and Add-ons. 07-14-2015 11:00 AM
- Posted Re: Has anyone encountered an error while trying to update the tripwire setup page? on All Apps and Add-ons. 07-14-2015 10:51 AM
- Posted Re: splunk app for tripwire enterprise ? on All Apps and Add-ons. 07-14-2015 07:57 AM
- Posted Re: getting splice taxii.py error connection timed out on All Apps and Add-ons. 07-13-2015 12:11 PM
- Posted Re: Does SA-SPLICE or the Splunk App for Enterprise Security support certificate-based authentication to TAXII service such as FS-ISAC? on Splunk Enterprise Security. 07-13-2015 11:39 AM
- Posted Re: Does SA-SPLICE or the Splunk App for Enterprise Security support certificate-based authentication to TAXII service such as FS-ISAC? on Splunk Enterprise Security. 07-13-2015 11:34 AM
- Posted Re: getting splice taxii.py error connection timed out on All Apps and Add-ons. 07-13-2015 11:33 AM
- Posted Re: getting splice taxii.py error connection timed out on All Apps and Add-ons. 07-13-2015 09:08 AM
- Posted getting splice taxii.py error connection timed out on All Apps and Add-ons. 07-13-2015 07:44 AM
- Tagged getting splice taxii.py error connection timed out on All Apps and Add-ons. 07-13-2015 07:44 AM
- Posted Re: Does SA-SPLICE or the Splunk App for Enterprise Security support certificate-based authentication to TAXII service such as FS-ISAC? on Splunk Enterprise Security. 07-08-2015 10:07 PM
- Posted Does SA-SPLICE or the Splunk App for Enterprise Security support certificate-based authentication to TAXII service such as FS-ISAC? on Splunk Enterprise Security. 06-16-2015 07:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
08-14-2015
11:50 AM
we are having the same issue behind proxy. Every time I use the add-on set up page, it overwrites the local/service_now.conf file with empty entries, and times out. very frustrating, as the app does not attempt to authenticate to proxy (no traffic to proxy using tcpdump).
[splunk@~]$ more /opt/apps/splunk/etc/apps/Splunk_TA_snow/local/service_now.conf
[snow_account]
password =
url =
username =
release = Automatic
[snow_default]
collection_interval = 600
loglevel = ERROR
[snow_proxy]
proxy_enabled = 1
proxy_port = 9090
proxy_url =
proxy_password =
proxy_username =
... View more
08-03-2015
08:10 AM
Hi,
I would like to run a report of Active Directory accounts created in the last 24 hours. I tried different things, but not sure if the eval command takes splunk-style time period (such as -24h) or > yesterday's date. |eval whenCreated=20150803 did not work.
|ldapsearch domain=test.com
search="(&(objectclass=user))"
|makemv userAccountControl
|search userAccountControl="NORMAL_ACCOUNT"
|eval whenCreated=20150803
|table sAMAccountName, displayName,givenName,sn,suffix,mail,telephoneNumber,mobile,manager,priority,department,category,watchlist,whenCreated,endDate
... View more
07-14-2015
10:51 AM
I am having the exact same problem, but modyfing local/app.conf and restarting splunk did not help.
... View more
07-14-2015
07:57 AM
I am getting error when trying to configure the tripwire app- Encountered the following error while trying to update: In handler 'localapps': Error while posting to url=/servicesNS/nobody/te/te_data/te_endpoint/te_parameters
Tripwire Listening Port (not sure what it is, but I set it to default listening port that's open in splunk)
Enter the port that Splunk should listen for data 9997
... View more
07-13-2015
12:11 PM
asked for the feed ID from the repository provider
... View more
07-13-2015
11:39 AM
Which feed should I point to for FS-ISAC?
taxii.py" Received a Status Message in response. Status Type: NOT_FOUND; Message: Feed not found
... View more
07-13-2015
11:34 AM
I get taxii.py" taxii_cert_pem or taxii_cert_key doesn't exists error, even though the pem and key files are located and pointed to in the splice configuration. any troubleshooting steps?
... View more
07-13-2015
11:33 AM
I am now getting - taxii.py" taxii_cert_pem or taxii_cert_key doesn't exists even though their pointed to /opt/splunk/cert location (the file is there), what permission sets should i try? the file is owned by splunk user.
... View more
07-13-2015
09:08 AM
I see outbound connection to hailataxii, however the connection is going through proxy, and I am still getting the connection timed out error. Using wget and Curl to get other websites fine, but hailataxii requires a taxi client connection.
162.252.82.163.http: Flags [S], seq 2714165889, win 14600, options [mss 1460,sackOK,TS val 2863971827 ecr 0,nop,wscale 7], length 0
... View more
07-13-2015
07:44 AM
Checked wget to hailataxi.com, working fine (using http_proxy variable) . Do i need to configure a proxy inside splice also?
ERROR ExecProcessor - message from "python /opt/apps/splunk/etc/apps/SA-Splice/bin/taxii.py" something went wrong with TAXII polling: <urlopen error [Errno 110] Connection timed out>
... View more
- Tags:
- SA-SPLICE
07-08-2015
10:07 PM
Brian, I have seen the feature in SPLICE to add the pem/key parameters. Does it work for FS-ISAC feeds without using soltra Edge?
... View more
06-16-2015
07:47 AM
Hi. Does the Splice or Splunk Enterprise Security app support certificate-based authentication to the taxii service such as FS-ISAC? Is there a need to use third-party integrator such as Soltra Edge for FS-ISAC feed, or we can connect splunk directly to it?
... View more
