cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
golsida
Explorer
Member since: ‎04-03-2016
‎06-07-2023
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 2
Member Since ‎04-03-2016
Activity Feed
View All

Re: Cisco eNcore eStreamer fields value changed (5...

by in Getting Data In
‎04-05-2018 09:49 PM
‎04-05-2018 09:49 PM
@aakwah I think props.conf and transforms.conf does not matter. Because, python source code did not define some field. For example, $SPLUNK_HOME/etc/apps/TA-eStreamer/bin/encore/estreamer/adapters/splunk.py file does not define DESTINATION_IP_COUNTRY, destinationCountry and $SPLUNK_HOME/etc/apps/TA-eStreamer/bin/encore/estreamer/metadata/view.py file does not define DESTINATION_IP_COUNTRY. ... View more

Cisco eNcore eStreamer fields value changed (5.4 -...

by in Getting Data In
‎04-05-2018 02:18 AM
‎04-05-2018 02:18 AM
HI, splunker. I'm testing two different versions of the estreamer app. (FMC : 5.4, 6.1 / Splunk App : 1629, 3662) I found two problems with the encore version. (3662) and rec_type=400. 1) src_ip_country is okay (string), but dest_ip_country is number. 2) In the FMC 5.4 and Splunk App 1629, the fw_rule value is displayed as a letter, but in the FMC 6.1 and Splunk App 3662 version it is displayed as a number. I wonder if this is a bug or is it intended. If it is a bug, would you tell me which python source to modify? ... View more

Re: Stream:stats suddenly stop

by in All Apps and Add-ons
‎01-09-2017 12:12 AM
‎01-09-2017 12:12 AM
Hi vshcherbakov, Yes, other events are forwarded consistently. (ex, splunkd.log, streamfwd.log) When I restart UF splunk, it sends the events again. But, after few days( 2~4 days) suddenly stop to send only stream:stats event. In addition, our customer have 150 UF with stream app and 17~20 sites are forwarded normally. Is the number of sites a problem? ... View more

Stream:stats suddenly stop

by in All Apps and Add-ons
‎01-05-2017 10:01 PM
2 Karma
‎01-05-2017 10:01 PM
2 Karma
Hi, My customer use splunk UF with stream app. (Splunk 6.4.3, App for stream : 6.6.1) When I started UF, stream:stats event received successfully, but after few days it cannot received suddenly. Only this event will not be collected and the other event(captured packet event) will be received normally. So, when I restart UF, everything is Okay. streamfwd.log have not any information for stop the stream:stats event. Would you tell me about the transfer process for stream:stats event? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-07-2023 01:15 AM
Karma from
View All