All Apps and Add-ons

Index Symantec not working

edsau
New Member

Hi There,

I can see my data coming from the SAV box however it is being stored in the main index rather than Symantec index. From my limit knowledge it looks like the scripts are point to the symantec index however that is not the case.

This is an out of the box default install that I have no modified.

Any thoughts on where else I can look to resolve this?

Cheers

Tags (1)
0 Karma

aakwah
Builder

Hello,

The definition of Symantec index does exist on the Technology Add-ons under appserver/addons.

As per App docs, for distributed Splunk instances, the Technology Add-ons just needs to go on the indexers.

Technology Add-ons are included with this app in the appserver/addons directory.

Regards

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...