Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About cyrillefranchet
cyrillefranchet
Explorer
Member since:
05-05-2011
06-05-2020
Community Statistics
| Posts | 10 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 3 |
| Member Since | 05-05-2011 |
Activity Feed
- Got Karma for Splunk, monitor file changes and MD5 checksum. 06-05-2020 12:46 AM
- Got Karma for Re: Checkpoint LEA and SSL authentication. 06-05-2020 12:45 AM
- Got Karma for Re: Checkpoint LEA and SSL authentication. 06-05-2020 12:45 AM
- Posted Re: New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py at very high frequency until crash on All Apps and Add-ons. 10-29-2018 03:21 AM
- Posted Re: New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py at very high frequency until crash on All Apps and Add-ons. 10-26-2018 06:12 AM
- Posted Re: New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py at very high frequency until crash on All Apps and Add-ons. 10-26-2018 06:10 AM
- Posted Typo in the https_proxy example on All Apps and Add-ons. 10-26-2018 05:49 AM
- Tagged Typo in the https_proxy example on All Apps and Add-ons. 10-26-2018 05:49 AM
- Posted Re: btool app line breaking issues on Monitoring Splunk. 10-17-2018 08:59 AM
- Posted Splunk for Palo Alto Networks: Why are we getting multiple "The lookup table...does not exist" errors? on All Apps and Add-ons. 09-30-2015 03:18 AM
- Tagged Splunk for Palo Alto Networks: Why are we getting multiple "The lookup table...does not exist" errors? on All Apps and Add-ons. 09-30-2015 03:18 AM
- Tagged Splunk for Palo Alto Networks: Why are we getting multiple "The lookup table...does not exist" errors? on All Apps and Add-ons. 09-30-2015 03:18 AM
- Tagged Splunk for Palo Alto Networks: Why are we getting multiple "The lookup table...does not exist" errors? on All Apps and Add-ons. 09-30-2015 03:18 AM
- Posted Re: Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 08:07 AM
- Posted Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 07:12 AM
- Tagged Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 07:12 AM
- Tagged Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 07:12 AM
- Tagged Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 07:12 AM
- Tagged Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 07:12 AM
- Tagged Splunk, monitor file changes and MD5 checksum on Getting Data In. 08-05-2011 07:12 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
10-29-2018
03:21 AM
After doing some testing, this is due to the cookies that are dumped into the inputs.conf file. As soon as we have more than 2 inputs the scheduler crashes.
Commenting the cookies dump is the way to go to solve this issue.
I don't know why this is happening only on Windows and Linux. maybe something related to the modification time of the inputs.conf file.
... View more
10-26-2018
06:12 AM
That's funny my OSX doesn't complain as well but my production server on Windows is dying 🙂
... View more
10-26-2018
06:10 AM
Hi Nicolas,
Did you finally find an explanation regarding this issue? My splunkd consumes 110% of the CPU when I'm using this app with a custom responses handler.
Just checked your code and thought that you develop your own REST client for your purpose. Could you confirm?
Thanks.
... View more
10-26-2018
05:49 AM
Hi,
There is a little mistake in rest_manager.xml. The element https_proxy is defined with an incorrect example. IMHO, the proxy URL should contain http:// instead of https://.
Regards
... View more
10-17-2018
08:59 AM
Did you find any solution? I don't see why this isn't working properly.
... View more
09-30-2015
03:18 AM
Hello,
We met an issue with the Splunk for Palo Alto Networks app "CSV does not exist".
Splunk works in Windows Server 2012 R2.
Could you please help us ?
Regards
Rémy
... View more
08-05-2011
08:07 AM
Hello Ayn,
Nice try but the file name never changes so the crcSalt is not useful. Splunk continues to retain the previous hashes.
Another idea maybe?
... View more
08-05-2011
07:12 AM
1 Karma
Hi all,
I'm trying to index a log file which consists of some counters. This file doesn't change a lot as counters are just incremented.
As the file size is around 1kB , I have tried to use CHECK_METHOD=entire_md5 to avoid the 256 first bytes and 256 last bytes problem. But the monitor doesn't work so well...
I'm suspecting Splunk to keep hash results somewhere , because my universal forwarder doesn't want to send the log content if the log file has already have the same content.
Maybe anyone can explain the monitor MD5 stuff more deeply? The best solution for me would be to tell Splunk to not keep those hashes.
Thank you.
Cyrille
... View more
05-11-2011
01:50 AM
2 Karma
Ok to have this working , on Splunk forwarder you need to retrieve the key by executing the following command.
opsec_putkey -port 18184 < Source IP address of checkpoint box >
You should get the authkeys.C file. Copy this file in the $SPLUNK_HOME/etc/apps/lea-loggrabber-splunk/bin/ directory.
Modify lea.conf file to change "lea_server auth_type ssl_opsec" to "lea_server auth_type auth_opsec".
Restart the Splunk forwarder. Now , you should receive events from CheckPoint.
Cyrille.
... View more
05-11-2011
01:13 AM
Hi all,
Does anyone try to use FWN1 auth method successfully instead of SSL one?
I'm asking because it could be complicated to stop ChekPoint Manager in a production environment to modify the fwopsec.conf file.
Thanks for your help.
Cheers,
Cyrille
... View more
- Tags:
- checkpoint
- lea
- opsec
