About linhmai_bne

linhmai_bne · ‎09-11-2023

This solution is the one I have been looking for. Thank you.

linhmai_bne · ‎03-08-2023

I just upgraded to Splunk 9.0.3 and SA-ldap 3.0.6. And I have this error SA-ldap not compatible with Python 3

linhmai_bne · ‎08-10-2022

It doesn't fix my issue. The support has provided some workaroud: useAck = false [queue] maxSize = 100MB But all those don't help my at all. Please let me know if you guys have any solutions. Tks. Linh

linhmai_bne · ‎08-03-2022

I got similar issue after upgrading 8.2.7. I have tried to set: useAck=false disable app Splunk...Forwarders chown -R splunk:splunk /opt/splunk but the problem is still there.

linhmai_bne · ‎12-07-2021

- SSH to search head. - Go to app folder location .../etc/app/<name>/default - Open savedsearches.conf - Copy search query using that index - Add that search savedsearches.conf in ../etc/app/<name>/local - Add disabled = 1 - Restart That is how I solved it by disabling the search query.

linhmai_bne · ‎10-06-2021

Hi all, Does the Rubrik app support Token authentication yet? Tks Linh

linhmai_bne · ‎07-05-2021

Hi @woodcock , I received this error when I run | inputlookup windows_app The following error(s) occurred while the search ran. Therefore, search results might be incomplete. The lookup table 'windows_apps' requires a .csv or KV store lookup definition. The lookup table 'windows_apps' is invalid. Do you think what is missing? I run from the search head. Tks Linh.

linhmai_bne · ‎06-30-2021

Hi. I am upgrading from 8.1.0 to 8.2.1. I received the bundle replication issue as below: Problem replicating config (bundle) to search peer ' 10.150.x.x:8089 ', Upload bundle="/opt/splunk/var/run/SHD01-1625054310.bundle" to peer name=IND01 uri=https://10.150.x.x:8089 failed; http_status=409 http_description="Conflict". I received an error for each member of indexer cluster. My search head is a standalone server. Could anyone please help? Linh

linhmai_bne · ‎06-02-2021

Hi Nick, I am planning to install a SH in DMZ. I wonder what steps I should follow. Tks Linh

linhmai_bne · ‎03-16-2020

This worked for me. Tks

Posts	10
Solutions	0
Karma Given	11
Karma Received	0
Member Since	‎03-16-2020

Online Status	Offline
Date Last Visited	‎09-12-2023 12:01 AM

Rubrik app with token authentication

Search head bundle replication failed due to 409 h...

Re: kvstore certificate renewal is not working...

Re: Is Splunk Supporting Add-on for Active Directo...

Re: Ingestion Latency after updating to 8.2.1

Re: Why are we receiving this ingestion latency er...

Re: Missing index firedalerts (used by app DA-ITSI...

Rubrik app with token authentication

Re: Splunk 8.0.2 - Could not load lookup=LOOKUP-ap...

Search head bundle replication failed due to 409 h...

Re: How to make my splunk enterprise site accessib...

Re: How to resolve error "Error pulling configurat...