The binary is used for verifying the signature of the license key. We have already contacted all vendors listed on VirusTotal. Only the Windows version is affected. If you do not utilize Windows, you can safely remove the binary. Furthermore, if you are a customer of SentinelOne or another vendor, kindly contact them to flag the binary as safe. ... View more

It was not exactly was I was looking for. The logfile is in ASCII, but it contains fields that are MIME encoded. To solve the problem I wrote an external command, that decodes MIME fields into utf-8. Get the code here: http://pastebin.com/vtWnL50z ... View more

I just run in to the same issue. Deployment host is on Linux, client is on Solaris. While it seems to work on systems using ZFS, it does not seem to work on UFS. Untaring the bundle (with Solaris' tar) from /opt/splunk/var/run/ime/solaris-1305840239.bundle does in fact preserve the permissions on UFS. Maybe Splunk uses another tar for this... ... View more