I am trying to set up inputs on TA-Tenable add on and it fails with error "Argument validation for scheme=tenable_securitycenter: script running failed (killed by signal 9: Killed).". I installed "Tenable add-on for Splunk" version 3.1.0 on one of our heavy forwarder. Any suggestions what could be wrong here?
... View more
Hi, I am running into similar issue. The data isn't being written to the index. I check the checkpoint CSV and could see the info there, as per you suggestion I emptied the file but that too didn't help in getting the data in. Anything else that I shall do?
... View more
Hi, We have a dataset that has improper line breaking on few of the events in it. We have added configuration to ingest future data with proper time stamp extractions and recognition. But we also want the already existing data to parse and show up properly. Is there a way to perform the linebreaking\masking of already ingested data from the Search head by updating the configuration in props.conf? Thanks in advance.
... View more