- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- DUO Log Add-on for Splunk: Why is DUO not showing ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
From the help document, it says under "Data inputs" there should be a DUO option. I am not seeing this option on version 6.5.0 and I have also tried using "Add Data" and still don't see this option. Is anyone else able to get this add-on to work?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I've installed the app under 6.5 and verified the input is visible, I haven't done extensive testing but I don't think the modular input stuff has changed. You can try navigating directly to the add input data setup page with this path appended to you server url
"/en-US/manager/launcher/adddata/selectsource?input_mode=1&modinput=1&input_type=duo"
If that doesn't work, I'm guessing something is wrong with the installation.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I've installed the app under 6.5 and verified the input is visible, I haven't done extensive testing but I don't think the modular input stuff has changed. You can try navigating directly to the add input data setup page with this path appended to you server url
"/en-US/manager/launcher/adddata/selectsource?input_mode=1&modinput=1&input_type=duo"
If that doesn't work, I'm guessing something is wrong with the installation.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is that character correct after "modinput=1"?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Apparently that was markdown turning it into the euro symbol, code block displays it correctly now, sorry about that!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ah ok, using that exactly URL works on my search head. Not sure why I can't get to that page from the main Data Inputs.
Introducing Splunk Enterprise 9.2
Adoption of RUM and APM at Splunk
Routing logs with Splunk OTel Collector for Kubernetes
