Hi Everyone, I am configuring ES SH on DMC . Distributed search » Search peers. but it is failing "replication status =failed". i checked the connectivity from DMC host -> ES SH which looks good. this is below error in _internal logs. 02-19-2020 12:13:38.522 -0500 WARN DistributedPeerManager - Unable to distribute to peer named at uri https://searchPeer_ES_SH:8089 because replication was unsuccessful. ReplicationStatus: Failed - Failure info: failed_because_HTTP_REPLY_ERROR_CODE. Verify connectivity to the search peer, that the search peer is up, and that an adequate level of system resources are available. See the Troubleshooting Manual for more information. Only ES SH(stand alone) is not able to be added to DMC . I am able to add indexers and Other management instances. Please suggest to resolve this. Thanks in advance. ... View more

Getting error in HF : User : splunk have rwx to the snmp_ta app. I am not sure what is the issue here. the team configured to host and port. message from "python SPLUNK_HOME/splunk/etc/apps/snmp_ta/bin/snmp.py" Failed to register transport and run dispatcher: bind() for (u'*', *) failed: [Errno 13] Permission denied snmp_stanza:snmp://cisco_prime Any help is appreciated. Thanks. ... View more

Hi All, I am using https://splunkbase.splunk.com/app/3945 app to pull crowdstrike Falcon intelligence data. what data model this data should be mapped. There is no tag.conf and eventtypes.conf in default directory. has anybody used it? what is the tags this data should be mapped to? ... View more