Is there any script or playbook that can help in adding executible permissions for particular scripts for nix app? ... View more

This is an old topic but I have been able to fix this many times in different environments: What you need to do on the forwarder host is rebuild the counters:   To repair this you take the following steps to repair/rebuild the performance counters. Start-->Run→cmd-->(Run As Administrator) Type the command: C:\Windows\system32>lodctr /R (capital R) ... View more

@admindeckge I had this same setup - HF collecting data + SHC bidirectional ticketing correlation search failing due to sys_updated_on field missing. To solve this, I created this as a field alias via the SHC deployer in Splunk_TA_snow/local/props.conf: [snow:incident] FIELDALIAS-sys_updated_on = dv_sys_updated_on AS sys_updated_on ... View more

I had the same thing going on, turns out I couldn't get a token: (set logging to debug and add this to input_module_MS_AAD_audit.py, line 122): helper.log_debug("Token: %s" % str(access_token)) I added the same proxies = { } entry to get_access_token and updated the response (line 45) from: response = requests.post(endpoint, data=payload).json() to: response = requests.post(endpoint,proxies=proxies,data=payload).json() (Yes, I know this is kind of ugly to define the proxies twice but it's a quick and dirty fix. I didn't feel like totally overhauling this to add proxy support) ... View more

I would love to take credit for this but I can't think of anything that would have fixed this. I had tried to update the libraries but ran into lots of issues. Thus, I put it aside for now. ... View more

Wow, thanks for the lightning-fast turnaround Luke. Confirmed this fix worked. As an aside, it's purely cosmetic but figured I'd mention the count on the Data Inputs page caps out at 30 next to Website Availability Check. Thanks again, Mike ... View more

No, I just gave up on that functionality. I consider it a bug as from all my searches there's no clear answer ... View more

Take a look over at https://answers.splunk.com/answers/356938/sitename-key-causing-failed-dashboard-searches.html?childToView=789765#answer-789765. If your lookup_host_site.csv has values, and SiteName is what's causing PerfMon data not to show, it could be case-sensitivity. Good luck! ... View more