About thscheidegger

thscheidegger · ‎12-04-2019

Thanks to the help of a colleague we found the solution: | rest /services/apps/local | table title eai:acl.perms.read find the app(s) with no read permission and correct it

thscheidegger · ‎12-03-2019

The errors I get on the Windows installation are not very useful 2019-12-03 09:26:35,223 INFO 5596 - Handling a request 2019-12-03 09:26:35,240 INFO 5596 - Executing function, name=get_read_progress 2019-12-03 09:26:38,609 INFO 5596 - Handling a request 2019-12-03 09:26:38,609 INFO 5596 - Executing function, name=get_app_list 2019-12-03 09:26:38,641 ERROR 5596 - Failed to handle request due to an unhandled exception Traceback (most recent call last): File "D:\Splunk\etc\apps\upgrade_readiness_app\bin\app_list.py", line 118, in handle return function_to_call(scan_type) File "D:\Splunk\etc\apps\upgrade_readiness_app\bin\app_list.py", line 161, in get_app_list user_app_list = self.get_user_apps(content_role, content_apps) File "D:\Splunk\etc\apps\upgrade_readiness_app\bin\app_list.py", line 231, in get_user_apps read_permission = app['acl']['perms']['read'] KeyError: 'read'

thscheidegger · ‎12-02-2019

I'm trying to run the app version 2.0 on Splunk 7.3.3 on Windows Server 2016. Even as Admin I always get the error 'read'. In the instructions this is referred as a known issue if the permissions are insufficient. I had no problems on Linux, is there an issue with Splunk on Windows?

thscheidegger · ‎06-26-2017

db connect 3.0.3 I'm creating a new lookup. There's a dropdown to choose the app for the lookup, it only shows the first 30 apps, but my app is not in that range. How can I increase the number of apps shown? Also there is not an option to move the lookup to a different app, that was possible in db connect 1. How can I do that? I'm using db connect in an shcluster, moving the conf file is possible but difficult

thscheidegger · ‎04-04-2014

Hi, Is there a limit of 100 FWD in the topology view? I have more than 120 active forwarders in the environment here and I don't see any Searchheads or Indexers in the list, just exactly 100 Forwarders. Tom

thscheidegger · ‎09-02-2011

We are working with mutiple platforms that will send log data to heavy forwarders. We want to encrypt and if possible also authenticate the connetions. For one platform we have our own CA for the server certificates, the authenticated connections work, for the second platform we want to use the splunk certificates. I didn't see how we can configure the heavy forwarder with two different CAs. Is this even possible? How would I build this?

thscheidegger · ‎06-02-2011

I'm trying to set up our infrastructure to use SSL encrypted connections. For this purpose I want to use existing system certificates, which are all PKCS#12 certificates. Can I use PKCS#12 certficiates directly in splunk?

Posts	7
Solutions	1
Karma Given	3
Karma Received	8
Member Since	‎04-29-2011

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Splunk Platform Upgrade Readiness App Read Error

New Lookup App dropdown only shows the first 30 Ap...

Deployment Topology View Limit

Support for multiple CA for universal forwarder to...

Which SSL certificates are supported

Re: Splunk Platform Upgrade Readiness App Read Err...