About kruane

kruane · ‎09-10-2022

Is there a way to track when an index stopped bring in data? I just noticed that one of our indexes is no longer bring data into Splunk. Is there a command where I can find last known time? I have been able to track it manually back to day of when it stopped receiving data.

kruane · ‎08-05-2022

Say I'm just trying to find if anything in Splunk is showing number "12345678". Isn't there a way to query a simple search trying to find that? Or if I'm looking for a specific user; is there a way to write a query like "jsmith@gmail.com". Essentially looking for anything associated with this username or anything associated with that number above.

kruane · ‎08-04-2022

I just installed this app and found it simple to setup...but I must be doing something wrong. I've created Trap information on my two UPS devices and haven't had any luck bringing them into Splunk. I enabled SNMP, all versions and then I added the IPs for the Traps to point to and included my splunk cloud DNS name, Deployment IP, HF and UF and haven't seen anything come in. It also says the default sourcetype it has is snmp_ta Activation Key * Using 14 day free trial Log Level INFO SNMP Mode Listen For Traps (I've also tried DEBUG) SNMP Version 2C I left everything else blank except SNMP Trap listener settings I put the IP address of the UPS I'm trying to get the information from.

kruane · ‎08-04-2022

So I have migrated to Splunk Cloud, but still have a Deployment server, UF, and HF. How do I find out what my IP is for Splunk Cloud? I'd like to be able to send Trap information directly there. Especially since the UPS keeps saying failed to find DNS name. Thank you.

kruane · ‎08-04-2022

Can't I just search an IP within Splunk with no syntax, just 192.15.10.1 and if there is any data or this IP is simply being accessed by one of our users, then I should be able to see it. Are there better ways to find it? Overall I want to see if two specific IPs are connecting to Splunk, if so, then broaden the search.

kruane · ‎07-08-2022

Wait a second...sorry to bug you again and I'm super appreciative to your feedback. A thought occurred to me. If the data from the router is ingested to Splunk, wouldn't that data be able to suggest what ports are down and up? It might not be a ping test to the camera, but it would show a connectivity issue, which I then could create Alerts on.

kruane · ‎07-08-2022

The other step for me is to actually view Genetec. I don't have access at this moment. It definitely has configurations that are not being utilized, like ping testing to verify if the camera is up and running (from what I've read). Still, I'd like to be able to bring that data to Splunk for easy viewing for management. Create Reports, Alerts or a dashboard on the current state of the cameras. So I'll check and see if ingesting data from Genetec is feasible.

kruane · ‎07-08-2022

Thank you for your response! Is there a way to ingest data directly from the router being used by the cameras? Curious of how that setup works. Will the ingested data from the router create events, that are then workable into creating a "failed to ping" Alert. We have Splunk Cloud. Our UF, Heavy Forwarder that feeds Splunk Cloud lives in an AWS account that we have. We recently moved from Enterprise to Cloud.

kruane · ‎07-08-2022

Hello, My goal is to create a ping test for several cameras we have onsite. I'm looking for advice on this issue. We are using a software called Genetec for our cameras (not sure if this can be integrated with Splunk nor if it is completely necessary). Details: Currently I have Splunk Cloud (3 on-premise Hosts AWS) Cameras that connect to a physical router at our office. I have access to the physical router used by the cameras. Private IPs within a VLAN. I have access to the cameras' private IPs and can ping them when connected to our VPN. Genetec software used for our cameras. Goals: Create Alerts when the cameras go down via a ping test. Possibly create a dashboard showing each's camera's availability (meaning if it is on or off)

kruane · ‎12-10-2021

Having some trouble here. I was using this to setup things up: https://www.youtube.com/watch?v=8pH_XRjPMjM Steps Completed: 1.) Created Index 2.) I've add the Splunk Connect for Zoom 3.) Installed Splunk App for Zoom For Zoom: 1.) I've gone into Zoom and now have an administrative account. 2.) Went to: https://marketplace.zoom.us/ 3.) I completed the information about the setup, company name, username etc. 4.) The trouble occurs on the last part where you enable the "Event subscriptions". It will not accept my url. Not exactly sure why. I tried various ways and it keeps saying "invalid url"

Posts	10
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎12-10-2021

Online Status	Offline
Date Last Visited	‎09-10-2022 11:03 PM

Is there a way to track when an index stopped brin...

How to write simple search of key words or numbers...

Help with SNMP Modular Input- Why am I not seeing ...

How Do I Find My Splunk Cloud IP?

Can I search IPs with no syntax?

Help creating alerts for cameras ping test IP

Is there a way to track when an index stopped brin...

How to write simple search of key words or numbers...

Help with SNMP Modular Input- Why am I not seeing ...

How Do I Find My Splunk Cloud IP?

Can I search IPs with no syntax?

Re: Help! Creating Alerts for Cameras Ping Test IP

Re: Help! Creating Alerts for Cameras Ping Test IP

Re: Help! Creating Alerts for Cameras Ping Test IP

Help creating alerts for cameras ping test IP

Re: COVID-19 response: Is Splunk able to ingest lo...