10-23-2019 00:30:50.477 +0000 ERROR PersistentScript - From {/opt/splunk/bin/python /opt/splunk/lib/python2.7/site-packages/splunk/persistconn/appserver.py}: /opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/urllib3/connectionpool.py:846: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings 10-23-2019 00:30:50.477 +0000 ERROR PersistentScript - From {/opt/splunk/bin/python /opt/splunk/lib/python2.7/site-packages/splunk/persistconn/appserver.py}: InsecureRequestWarning) ... View more

anyone knows why stash sourcetype for a particular app(demisto in this case) going to index=main? i believe these are notables. I will like to know which .conf file contains this setting and how to change from main index to another index. Thanks Ben ... View more

Has any one done this integration with splunk? Please send steps if you have. Could not find any TA out there for it. Looked all over https://www.symantec.com/connect/groups/symantec-apps-splunk splunk base Thanks ... View more

Can someone help me calculate the health score for a service in ITSI for three months? It would be something like the picture below: ... View more

Traceback (most recent call last): File "wordcloudcb.py", line 2, in from splunklib.searchcommands import dispatch, GeneratingCommand, Configuration, Option, validators File "/opt/splunk/etc/apps/wordcloud_cb_app/bin/splunklib/searchcommands/init.py", line 145, in from .environment import * File "/opt/splunk/etc/apps/wordcloud_cb_app/bin/splunklib/searchcommands/environment.py", line 120, in splunklib_logger, logging_configuration = configure_logging('splunklib') File "/opt/splunk/etc/apps/wordcloud_cb_app/bin/splunklib/searchcommands/environment.py", line 103, in configure_logging fileConfig(filename, {'SPLUNK_HOME': splunk_home}) File "/usr/lib64/python2.6/logging/config.py", line 84, in fileConfig handlers = _install_handlers(cp, formatters) File "/usr/lib64/python2.6/logging/config.py", line 141, in _install_handlers hlist = cp.get("handlers", "keys") File "/usr/lib64/python2.6/ConfigParser.py", line 556, in get raise NoSectionError(section) ConfigParser.NoSectionError: No section: 'handlers' ... View more

anyone enountered this issue upgrading to 4.1 2018-06-19 08:27:13 [main] INFO com.caspida.model.aggregates.Cube - Aggregates [AuditEvents] has custom retention interval [3m] , overriding global configuration [1m] java.lang.Exception: Cube not found Generic/DataSourceValidations at com.caspida.analytics.utils.ATools.createTables(ATools.java:60) at com.caspida.analytics.utils.ATools.main(ATools.java:359) /opt/caspida/bin/atools -o CreateTable -t Generic -c DataSourceValidations -f: failed, aborting Tue Jun 19 08:27:13 EDT 2018: Upgrade failed in step: UpgradeAnalytics_4.1, aborting ... View more

I have about 4 different tables that i am trying to join table 1 and table two have a common id, sys_id and when you join those two there is another common field parent_id which is also available in table 3 in this case how do i join the three tables since table 3 has parent_id and its also in the other two join join table1 + table2, using sys_id join [table1+table2] + table 3, using parent_id ... View more

I want to sort out a csv but it not working tried ......| fields Date,count | stats by Date,count | eval Date=strptime(Date, "%d/%m/%Y") | sort Date | eval Date=strftime(Date, "%m/%Y") | chart as total over t1 by Date I keep getting 01/2018 02/2018 03/2018 This is the result i am expecting 03/2018 02/2018 01/2018 ... View more