Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About msatish
msatish
Path Finder
Member since:
01-16-2025
06-25-2025
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 11 |
| Karma Received | 0 |
| Member Since | 01-16-2025 |
Activity Feed
- Posted Re: Syslog Configuration required for custom sourcetypes on Getting Data In. 06-17-2025 02:45 AM
- Posted Re: Syslog Configuration required for custom sourcetypes on Getting Data In. 05-30-2025 02:34 AM
- Karma Re: Syslog Configuration required for custom sourcetypes for livehybrid. 05-29-2025 01:08 AM
- Karma Re: Syslog Configuration required for custom sourcetypes for VatsalJagani. 05-29-2025 01:08 AM
- Karma Re: Syslog Configuration required for custom sourcetypes for dionrivera. 05-29-2025 01:08 AM
- Karma Re: Syslog Configuration required for custom sourcetypes for dionrivera. 05-29-2025 01:08 AM
- Posted Splunk Slowness on Getting Data In. 05-21-2025 01:23 AM
- Posted UF not in CMC on Getting Data In. 05-07-2025 10:16 PM
- Posted Onboarding MOVEit Server Database logs to Splunk on Getting Data In. 05-05-2025 03:28 AM
- Posted Syslog Configuration required for custom sourcetypes on Getting Data In. 04-28-2025 04:32 AM
- Posted Re: Role Capabilities required for creating Global Dashboard on Dashboards & Visualizations. 04-08-2025 10:35 PM
- Posted Role Capabilities required for creating Global Dashboard on Feedback. 04-07-2025 02:15 AM
- Posted Re: Can service account be used as owner of Knowledge objects in Splunk? on Splunk Cloud Platform. 04-03-2025 11:35 PM
- Posted Re: Can service account be used as owner of Knowledge objects in Splunk? on Splunk Cloud Platform. 04-03-2025 11:34 PM
- Karma Re: Can service account be used as owner of Knowledge objects in Splunk? for livehybrid. 04-03-2025 11:34 PM
- Karma Re: Can service account be used as owner of Knowledge objects in Splunk? for isoutamo. 04-03-2025 11:34 PM
- Posted Can service account be used as owner of Knowledge objects in Splunk? on Splunk Cloud Platform. 04-03-2025 01:17 AM
- Posted Issues in SingulrAI-Splunk Integration on Splunk Cloud Platform. 03-27-2025 10:54 PM
- Posted Qualys logs not flowing to Splunk on Splunk Cloud Platform. 02-13-2025 08:10 AM
- Posted Re: Qualys logs not flowing to Splunk on Splunk Cloud Platform. 02-12-2025 11:21 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
06-17-2025
02:45 AM
@VatsalJagani / @livehybrid https://apps.splunk.com/app/1780/.-Does this EXOS app still help in parsing? or is it outdated one? Is EXOS an Extreme old operating system?
... View more
05-30-2025
02:34 AM
@livehybrid Yes, logs needs to be forwarded to SC4S. ExtremeCloud IQ will be sending logs in the legacy SYSLOG format RFC3164. Can we use app parser configuration file on the syslog server where we plan to receive Extreme AP logs in the legacy SYSLOG format RFC3164. Will this help in normalizing the data received from Extreme AP when tweaked as per log sample . Here is the resource I am referring to: https://splunk.github.io/splunk-connect-for-syslog/main/sources/ Also, should we need an add on or app to be installed or just defining app_parser conf file in Syslog help ?
... View more
05-21-2025
01:23 AM
What are the reasons for the slowness observed in the Splunk Mission Control incident review dashboard?
... View more
Labels
- Labels:
-
other
05-07-2025
10:16 PM
Newly installed Universal forwarders on windows servers are forwarding logs to Splunk Cloud but newly installed forwarders name is not coming up in forwarders list in Cloud Monitoring Console. What could be the reason?
... View more
Labels
- Labels:
-
universal forwarder
05-05-2025
03:28 AM
How to onboard MOVEit Server Database logs which is hosted on prem to Splunk Cloud? What is the preferred method?
... View more
Labels
- Labels:
-
other
04-28-2025
04:32 AM
I think Splunk doesn't have a built-in/defined sourcetype for ExtremeCloud XIQ logs. Can we define a custom sourcetype, like `extremecloud:xiq`, in the syslog server(splunk_metadata.csv)? If so, how do we make sure the logs coming from ExtremeCloud XIQ platform land in the "extreme" index and use the "extremecloud:xiq" sourcetype?
... View more
04-08-2025
10:35 PM
@livehybrid Okay what are the role capabilities one should have if they want to share a dashboard within an app if the user has a role with write permissions within the app.
... View more
04-07-2025
02:15 AM
Please share Splunk role capabilities needed for a user to create a global dashboard and also has the ability to modify the list of users who can edit that dashboard with out adding to admin_all_objects.
... View more
04-03-2025
11:35 PM
@livehybrid Thanks for sharing your insights, this is helpful.
... View more
04-03-2025
11:34 PM
@isoutamo Thanks for sharing your insights, this is helpful.
... View more
04-03-2025
01:17 AM
Can service account be used as owner of knowledge objects(saved searches, transforms-lookups, props-extracts, macros, and views)?Please share pros and cons.
... View more
Labels
- Labels:
-
administration
03-27-2025
10:54 PM
We created Splunk Token and added in SingulrAI environment along with splunk endpoint deatils(Site URL and Splunk management port) to send logs. However, Singulr AI was unable to pick up Splunk logs due to connectivity or network timeout issues. Singulr AI support mentioned they are seeing connectivity / network timeout issues with the provided splunk domain + port from the Singulr collector (deployed in our organization's environment). What is the reason?
... View more
Labels
- Labels:
-
administration
02-13-2025
08:10 AM
Qualys logs are not flowing to Splunk. This is the error: TA-QualysCloudPlatform: 2025-02-13 00:00:49 PID=3604316 [MainThread] ERROR: No credentials found. Cannot continue. How to debug it. Note: We recently updated the expired credentials of Splunk user account in qualys,new credentials are working fine with the GUI (https://qualysguard.qg2.apps.qualys.com/fo/login.php). However, the Splunk add-on is still not accepting them, and logs are not flowing.
... View more
Labels
- Labels:
-
troubleshooting
02-12-2025
11:21 PM
Hi @kiran_panchavat Thanks for your response. Which server contains the `passwords.conf` file for Qualys TA (TA-QualysCloudPlatform)? I couldn't find it on the Heavy Forwarder (HF).
... View more
02-12-2025
06:52 PM
Password of Splunk user account in qualys got expired, we have reset the password now, new credentials are working fine with the GUI (https://qualysguard.qg2.apps.qualys.com/fo/login.php). However, the Splunk add-on(TA-QualysCloudPlatform) is still not accepting new credentials, and logs are not flowing to Splunk, what might be the issue. Steps Followed: Updated new password in TA-QualysCloudPlatform and restarted Splunk
... View more
Labels
- Labels:
-
troubleshooting
01-16-2025
09:15 PM
I am unable to select the option in dropdown or type anything (first part of URL) in the "Select Cloud Stack" while creating support case. Dropdown for adding Cloud Stack Name seems to be stuck, tried other browsers too
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-25-2025
02:01 AM
|
Karma given to
