Hi Splunkers,   We have a plan to upgrade splunk version to 8.1 in PROD environment. Before it we have upgraded version on test environment. In our organisation we are using one customized app which is using for sending alert to CAUIM from splunk and this app was build in Splunk add-on builder. In PROD we have a source code of the old application ,  that same file we have copied into test after upgrade the version. Now we have to recompile this application which will be compatible with Python 3 and splunk new version .  We wants to know the flow of recompilation. We tried to export the file but couldn't exported. Anybody knows the location where that file is getting stored. Kindly let us know,   Thanks & Regards , Abhijeet Bandre. ... View more

Hi Splunkers,   1. We are upgrading splunk version from 7.3.4 to 8.1.X. But can someone help to get the exact stable version between 8.1.X. Please assist us. Thanks, Abhijeet B. ... View more

Hi Splunkers,   We have installed  Nimbus add-on for sending splunk alert to CAUIM portal. Before upgrade to 8.1 it was working fine but after upgrade of splunk version the splunk is not able to send alert to CAUIM. We are seeing below errors when checked into logs. As per below error I suspect this error is relating with python version and we have python 3.7 which is needed for splunk version 8.1. Kindly assist to understand what is actually going on.   Error :  09-30-2021 00:22:14.930 +0200 ERROR sendmodalert [56934 AlertNotifierWorker-0] - action=nibus_alerting STDERR - File "/opt/splunk/etc/apps/nimbus-alerting/bin/nimbus_alerting/alert_actions_base.py", line 188, in prepare_meta_for_cam 09-30-2021 00:22:14.930 +0200 ERROR sendmodalert [56934 AlertNotifierWorker-0] - action=nibus_alerting STDERR - File "/opt/splunk/etc/apps/nimbus-alerting/bin/nibus_alerting.py", line 56, in <module> ... View more

Hi Splunkers, Can you pls share procedure to upgrade Microsoft Azure Add on for Splunk from 2.x to 3.x. We have upgraded splunk version on 8.1. We tried to find procedure on splunk site but couldnot found. Please assist us. Thanks & Regards, Abhijeet B. ... View more

Hi team,   We are upgrading splunk version from 7.3.6 to 8.1.X. As per procudure first we have upgraded version on cluster master and trying to login their but could not logged-in, like its not accepting the credentials.  1. Shall we upgrade entire infra first and then check. 2. Do we need to first get fix this login issue and then go for the next step. Kindly suggest.   Thanks & Regards, Abhijeet B.  ... View more

Hi splunkers, We are having  multisite architecture in our organization which is running on splunk version 7.3.6. This version ig going to end of support after 22 october 2021. We are upgrading version to 8.1 but after upgrade are not able to login into splunk through web.  Even in internal logs are seeing this error message "ERROR [614c8c71667f891f364ad0] config:140 - [HTTP 401] Client is not authenticated Traceback (most recent call last):". But on test environemnt we haven't got this issue. For login into splunk having facility of LDAP and IDM . All IDM roles are mapping and working fine with existing version and also working on test environment with version 8.1. ... View more

We have a 16GB Indexing License for one applicatiom , which for the first time we have exceeded the limit. I would like to know if there is a way to tell Splunk to stop this indexing input if the license quota hits > 90%. Can we do it by Script or how and is there any other solution for this ? Thanks. ... View more

I have AWS API gateway command like this - aws cloudwatch get-metric-statistics --metric-name CPUUtilization --start-time 2018-03-08T23:18:00Z --end-time 2018-03-09T23:18:00Z --period 3600 --namespace AWS/EC2 --statistics Maximum --dimensions Name=InstanceId,Value=i-036d43a37cdeaa8e5 , but we can't mentioned more than one metric in single command so what is the logic which I can used in java. ... View more