Hi, I installed the "smart Exporter" app from Splunkbase and exporting PDF is working properly. When I try to schedule, the below error message keeps coming even though I set up the mail host. "Please finish setting up  the smart export application (restart may be required)" The host is an application mail relay, hence the id and password is not required to send the emails but this app keep asking the id and password. Based on the below post, I commented out the id, port, password in the service.py, however, still the same error message is coming. Could someone help to fix the issue, thanks in advance! Regards, Purush ... View more

Hello Splunkers, I am trying to change the color of the Trend symbol in the single value dashboard. As per Splunk docs, if it is positive then green else red. So, I need to change the color instead of red. I have read the answer which the color of the single value can be changed based on the trend percentage, but it does not change the color of the trend. https://answers.splunk.com/answers/659702/how-to-configure-single-value-dashboard-color-base.html Any help here much appreciated, thank you and happy splunking. Regards, Purush ... View more

Hi Splunkers, I want to mask the PII data during the search time for specific users. I checked all the existing questions and answers, but was not able to achieve it. I tried the below option, I masked the data using the below search, and I saved as a macro, and then, I tried to give access to the user for only this macro, but the macro did not run. my search|rex field=_raw "(?.*)TYPE\s\[PHONE\]\s*\[\+\w{12}\](?.*)" | eval _raw=head."TYPE [PHONE] [############] ".tail I tried to use regex in props/transforms in the search head, but it did not help. I don't want re-index the data because the volume is large. I tried to do event type, but the query cannot have the pipe symbol. Any help is appreciated. Thanks, Purush ... View more

Hello all, I am getting the below error when I trigger alert from Slack alert app. I tried from Splunk 6.4 and 6.5.5 version also. FATAL sendmodalert - action=slack STDERR - Unexpected error: FATAL sendmodalert - action=slack STDERR - Alert action failed INFO sendmodalert - action=slack - Alert action script completed in duration=127380 ms with exit code=6 WARN sendmodalert - action=slack - Alert action script returned error code=6 ... View more

Hi, I am applying for a splunk developer position and I need to submit a case study or poc kind of in Splunk to them. What is the best way to do that? Also tell few best examples to do cast study that will prove my knowledge in splunk. thanks in advance. ... View more