Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About apezuela
apezuela
Explorer
Member since:
06-27-2013
11-03-2022
Community Statistics
| Posts | 22 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 2 |
| Member Since | 06-27-2013 |
Activity Feed
- Posted Re: Splunk DB Connect: How to resolve "Can not communicate with task server, check your settings" error messag on All Apps and Add-ons. 11-03-2022 03:09 AM
- Posted Re: While pushing the bundle from deployer to search heads, why am I getting the following "Error while fetching ap on Deployment Architecture. 12-22-2020 03:51 AM
- Karma Re: How do I renew an expired Splunk Certificate? for khusain_splunk. 12-22-2020 03:41 AM
- Got Karma for Re: Splunk DB Connect 2.2.0: Why am I getting error "HTTP 402 Payment Required -- In handler 'shclusterconfig': Requires license feature='DistSearch'"?. 06-05-2020 12:48 AM
- Karma Re: Checkpoint OPSEC LEA is not working for rroussev_splunk. 06-05-2020 12:46 AM
- Got Karma for Checkpoint OPSEC LEA is not working. 06-05-2020 12:46 AM
- Posted Re: How correctly interpret soucetype for Security log from Domain Controllers? on All Apps and Add-ons. 12-17-2018 07:11 AM
- Posted Re: how can i reset splunk.com login password on Splunk Search. 12-17-2018 06:20 AM
- Posted Re: how can i reset splunk.com login password on Splunk Search. 12-17-2018 05:24 AM
- Posted Re: Does the Splunk Palo Alto Networks (PAN) Add-on for Splunk support cloud-based deployment (TMS) for TRAPS? on All Apps and Add-ons. 12-11-2018 06:49 AM
- Posted Can you help us with our DB_Connect timestamp timezone issue? on All Apps and Add-ons. 11-07-2018 08:08 AM
- Tagged Can you help us with our DB_Connect timestamp timezone issue? on All Apps and Add-ons. 11-07-2018 08:08 AM
- Tagged Can you help us with our DB_Connect timestamp timezone issue? on All Apps and Add-ons. 11-07-2018 08:08 AM
- Posted Re: Token manipulation from JS on Dashboards & Visualizations. 10-15-2018 02:58 AM
- Posted Token manipulation from JS on Dashboards & Visualizations. 10-11-2018 06:19 AM
- Tagged Token manipulation from JS on Dashboards & Visualizations. 10-11-2018 06:19 AM
- Posted Splunk Add-on for Tenable - Nessus Professional V7 on All Apps and Add-ons. 05-30-2018 02:49 AM
- Tagged Splunk Add-on for Tenable - Nessus Professional V7 on All Apps and Add-ons. 05-30-2018 02:49 AM
- Tagged Splunk Add-on for Tenable - Nessus Professional V7 on All Apps and Add-ons. 05-30-2018 02:49 AM
- Posted When building a modular input, how to index JSON data? on Getting Data In. 04-09-2018 04:59 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
11-03-2022
03:09 AM
Check unix permissions over app bin folder, scripts need exec right (+x).
... View more
12-22-2020
03:51 AM
I have the same issue. Any clue? Splunkd.log: WARN AppsDeployHandler - Error while deploying apps to first member, aborting apps deployment to all members: Error while fetching apps baseline on target=https://shmemberhostname:8089: Network-layer error: Conn ect Timeout
... View more
12-17-2018
07:11 AM
Hi,
When you see a service server in src is right because in this event the service server is acting as a client. We have exclusions in our alerts to avoid false positives than from these servers. If you want to get the real ip address from a client, in that case (service servers) you need to get logs from that services (for example, in our case we are getting logs from ADFS to get client real ip address).
Best regards,
... View more
12-17-2018
06:20 AM
In that case, when you are trying to login, there are a link for recover password: https://www.splunk.com/en_us/page/lost_password
... View more
12-17-2018
05:24 AM
You can look at this link: https://www.hurricanelabs.com/splunk-tutorials/splunk-7-1-performing-a-splunk-password-reset
Best regards,
... View more
12-11-2018
06:49 AM
Yes, the latest version supports it.
... View more
11-07-2018
08:08 AM
Hi,
I am having some issues indexing a database.
We are using a database column as a timestamp for events. This "DateTime" column is is UTC time so we added a line in props.conf to specify time format TZ=UTC (we are using CET time).
When we check the events _time field shows us UTC time for that event, so it seems props.conf is not working.
Any idea about this issue?
Best regards
... View more
10-15-2018
02:58 AM
If in the place of change a token, the app open a new window there is not problem. I follow the guide: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEW3
... View more
10-11-2018
06:19 AM
Hi,
I am trying to manipulate a token from JS (there is not drilldown in "Status indicator" panel.
The idea is show the second panel when the user press over the first status indicator panel(panel_1). I am using the token "$show_listado_usuarios$">
Relevant code in xmlsimple is:
</panel>
<panel id="panel_1">
<title>PANEL 1</title>
<viz type="status_indicator_app.status_indicator">
<title>......</title>
<search>
<query>|...... </query>
</search>
<option name="drilldown">all</option>
<option name="height">63</option>
<option name="refresh.display">progressbar</option>
<option name="status_indicator_app.status_indicator.colorBy">static_color</option>
<option name="status_indicator_app.status_indicator.fillTarget">text</option>
<option name="status_indicator_app.status_indicator.fixIcon">users</option>
<option name="status_indicator_app.status_indicator.icon">fix_icon</option>
<option name="status_indicator_app.status_indicator.precision">0</option>
<option name="status_indicator_app.status_indicator.showOption">1</option>
<option name="status_indicator_app.status_indicator.staticColor">#555</option>
<option name="status_indicator_app.status_indicator.useColors">true</option>
<option name="status_indicator_app.status_indicator.useThousandSeparator">true</option>
</viz>
</panel>
<panel id="panel_2" depends="$show_listado_usuarios$">
<title>PANEL 2</title>
<table>
<search> .....
The code for change the token value to true is:
// Components to
require
var components = [
"splunkjs/ready!",
"splunkjs/mvc/simplexml/ready!",
"jquery"
];
// Require the components
require(components, function(
mvc,
ignored,
$
) {
$('#panel_1').click(function() {
var tokens = mvc.Components.get("default");
tokens.set("form.show_listado_usuarios","true");
});
Any idea of why is not working?
Best regards,
... View more
- Tags:
- splunk-enterprise
05-30-2018
02:49 AM
Hello,
I've been facing some issues regarding the Nessus Scans. For some reason, the Nessus scans results disappear after one month. I've scheduled a monthly scans of some computers. After a month, the data related to the previous scan disappear from Splunk. Do you know if this is a normal behavior? I've checked all the options of the Add-on and they seem to be ok.
Thank you very much.
Kind regards.
... View more
04-09-2018
04:59 AM
Hi,
I am building a modular input using Add-on Building and python.
When I am trying to index JSON data I get this error: "ERRORcannot serialize {u'rule-number': 1, u'type': u'access-rule..."
Any clue about this issue?
The relevant portion of code is:
res = json.load(response)
rules = res['rulebase']
for rule in rules:
event = helper.new_event(source=helper.get_input_type(), index=helper.get_output_index(), sourcetype=helper.get_sourcetype(), data=rule)
ew.write_event(event)
Best regards,
... View more
04-06-2018
03:56 AM
Hi,
Is there any limit for field value for transaction command?
I am executing transaction command over Security_ID field but Splunk is grouping events where Security_ID is different. For example:
Security_ID
S-1-5-21-1275861439-237309362-10498456-49961
S-1-5-21-1275861439-237309362-10498456-51020
Best regards
... View more
03-24-2017
03:49 AM
With previous versión of OPEC LEA, I could get logs from other security blades like "URL Filtering", "Application Control" and so on. Now, I only can get logs from "IDS" and "Firewall". Any idea?
We hace checkpoint management server in CP v8.1.
... View more
12-19-2016
02:57 AM
We have a small app to show KPI information from service manager DB (Changes, Tasks, Incidents and request). We are interested in open tickets, changes and so on from splunk but we didn't find an easy way to do it.
... View more
11-18-2016
05:09 AM
You must check you app.conf, check under [INSTALL] section what you have sentence is_configured = true
You can check your navigation menu permissions, user has to have read permisions over your menu
Best regards,
... View more
10-31-2016
07:38 AM
Hi,
I want to call to "Lookup File Editor App for Splunk Enterprise" from another app. The idea is when you press over the option, launch lookup editor, and a specific cvs file.
It was working in old version of "lookup editor" but now it is not working. My navigation menu was:
.....
'href="/app/Servicios/lookup_edit?path=myapp/mycustom.csv">Edit cvs'
....
Thank you
... View more
07-05-2016
01:38 PM
I want add a new field with the resolved ip address/hostname. Now, this script return a statistic table and i cannot do something more (other commands like chart,...).
... View more
07-03-2016
02:01 PM
This custom commands returns a table, is there any way to add new field in the place of a table?
I want use this command to add a new field in my search with the hosname or ipaddress.
... View more
06-08-2016
06:32 AM
1 Karma
I got answer from our splunk partner. DBX Connect 2 require enterprise license in the forwarder (if not after 2 months the forwarder stop working). We had to associated it with master licence server
... View more
03-18-2014
09:46 AM
Hi,
I want to filter some events in my heavy forwarder device. I want discart events what contain "PIX" but it is not filtering anything.
I modified follow files:
$SPLUNK_HOME/etc/system/local/inputs.conf
[monitor:///var/log/PIX515]
blacklist = \.(gz)
disabled = false
followTail = 0
host = password.enagas.eng
sourcetype = network_devices
$SPLUNK_HOME/etc/system/local/props.conf
[source:://var/log/REDES]
TRANSFORMS-null= setnull
$SPLUNK_HOME/etc/system/local/transforms.conf
[setnull]
REGEX = .*PIX-1.*
DEST_KEY = queue
FORMAT = nullQueue
How can I know what is happening?
UPDATE:
Hi,
I did a mistake, my configuration is:
$SPLUNK_HOME/etc/system/local/inputs.conf
[monitor:///var/log/REDES]
blacklist = \.(gz)
disabled = false
followTail = 0
host = password.enagas.eng
sourcetype = network_devices
$SPLUNK_HOME/etc/system/local/props.conf
[source:://var/log/REDES]
TRANSFORMS-null= setnull
I chose that sourcetype because I am doing testing with configuration.
Your suggestion is to changed in props.conf
[source:://var/log/REDES] to [sourcetype::network_devices]
UPDATE2:
I rewrote my configuration, but it still not working:
$SPLUNK_HOME/etc/system/local/inputs.conf
[monitor:///var/log/REDES]
blacklist = \.(gz)
disabled = false
followTail = 0
host = password.enagas.eng
sourcetype = cisco
$SPLUNK_HOME/etc/system/local/props.conf
[cisco]
TRANSFORMS-null= setnull
$SPLUNK_HOME/etc/system/local/transforms.conf
[setnull]
REGEX = .*PIX-1.*
DEST_KEY = queue
FORMAT = nullQueue
I want filter next log message:
Mar 19 16:48:11 72.16.30.100 %PIX-1-106021: Deny UDP reverse path check from
... View more
03-13-2014
10:51 AM
1 Karma
Hi,
Mi Checkpoint OPSEC LEA is working.
I get next splunk log:
index=_internal host="MOL18107" ( source="*splunkd.log" ) ( log_level="ERROR" ) * | cluster | search _raw="03-13-2014 18:47:08.508 +0100 ERROR ExecProcessor - message from \\"/opt/splunk/etc/apps/Splunk_TA_opseclea_linux22/bin/lea-loggrabber.sh --configentity CheckpointSecureManagement\\" ERROR: failed to create session (NO Error)"
If I exec: $SPLUNK_HOME/etc/apps/Splunk_TA_opseclea_linux22/bin/lea-loggrabber-debug.sh, I get next log:
[splunk@MOL18107 ~]$ $SPLUNK_HOME/etc/apps/Splunk_TA_opseclea_linux22/bin/lea-loggrabber-debug.sh
Using Splunk instance: /opt/splunk, app name Splunk_TA_opseclea_linux22
DEBUG: LOGGRABBER configuration file is: /opt/splunk/etc/apps/Splunk_TA_opseclea_linux22/bin/fw1-loggrabber.conf
DEBUG: function logging_init_env
DEBUG: function open_screen
DEBUG: Open connection to screen.
DEBUG: Logfilename : fw.log
DEBUG: Record Separator : |
DEBUG: Resolve Addresses: No
DEBUG: Show Filenames : No
DEBUG: FW1-2000 : No
DEBUG: Online-Mode : No
DEBUG: Audit-Log : No
DEBUG: Show Fieldnames : Yes
DEBUG: function get_fw1_logfiles
splunk internal call command: $SPLUNK_HOME/bin/splunk _internal call /servicesNS/nobody/Splunk_TA_opseclea_linux22/opsec/opsec_conf/
splunk output: QUERYING: 'https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_opseclea_linux22/opsec/opsec_conf/'
HTTP Status: 200.
Content:
<?xml version="1.0" encoding="UTF-8"?>
<!--This is to override browser formatting; see server.conf[httpServer] to disable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
-v opsec_sic_name CN=SplunkLEA,O=MOLFSC01.enagas.eng.jrd7zd -v opsec_sslca_file ../certs/CheckpointSecureManagement.p12 -v lea_server ip MOLFSC01.enagas.eng -v lea_server auth_port 18184 -v lea_server auth_type sslca -v lea_server opsec_entity_sic_name cn=cp_mgmt,o=MOLFSC01.enagas.eng.jrd7zd
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Env Configuration:
(
:type (opsec_info)
:lea_server (
:opsec_entity_sic_name ("cn=cp_mgmt,o=MOLFSC01.enagas.eng.jrd7zd")
:auth_type (sslca)
:auth_port (18184)
:ip (MOLFSC01.enagas.eng)
)
:opsec_sslca_file ("../certs/CheckpointSecureManagement.p12")
:opsec_sic_name ("CN=SplunkLEA,O=MOLFSC01.enagas.eng.jrd7zd")
)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...opsec_shared_local_path...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...opsec_sic_policy_file...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...opsec_mt...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_init: multithread safety is not initialized
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] cpprng_opsec_initialize: path is not initialized - will initialize
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] cpprng_opsec_initialize: full file name is ops_prng
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] cpprng_opsec_initialize: dev_urandom_poll returned 0
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_file_is_intialized: seed is initialized
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] cpprng_opsec_initialize: seed init for opsec succeeded
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_create: version 5301.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_add_name_to_group: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_set_local_names: () names. finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_create: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_add_name_to_group: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_set_local_names: (local_sic_name) names. finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_add_name_to_group: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_set_local_names: (127.0.0.1) names. finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_add_name_to_group: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_set_local_names: ("CN=SplunkLEA,O=MOLFSC01.enagas.eng.jrd7zd") names. finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_apply_default_dn: ca_dn = [O=MOLFSC01.enagas.eng.jrd7zd].
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_apply_default_dn: calling PM_policy_DN_conversion ..
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_apply_default_dn: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 12
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] CkpRegDir: Environment variable CPDIR is not set.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] GenerateGlobalEntry: Unable to get registry path
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 12
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 32
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 11
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 31
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 12
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] sslcaInitCP_Ex: using asym client without ca cert
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 12
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 12
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] sslcaInitCP_Ex: using asym client without ca cert
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 32
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 32
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] sslcaInitCP_Ex: using asym client without ca cert
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 11
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 11
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] sslcaInitCP_Ex: using asym client without ca cert
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 31
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] ckpSSLctx_New: prefs = 31
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_init_sic_id_internal: Added sic id (ctx id = 0)
DEBUG: OPSEC LEA conf file is lea.conf
DEBUG: Authentication mode has been used.
DEBUG: Server-IP : MOLFSC01.enagas.eng
DEBUG: Server-Port : 18184
DEBUG: Authentication type: sslca
DEBUG: OPSEC sic certificate file name : ../certs/CheckpointSecureManagement.p12
DEBUG: Server DN (sic name) : cn=cp_mgmt,o=MOLFSC01.enagas.eng.jrd7zd
DEBUG: OPSEC LEA client DN (sic name) : CN=SplunkLEA,O=MOLFSC01.enagas.eng.jrd7zd
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_init_entity_sic: called for the client side
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Configuring entity lea_server
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...conn_buf_size...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...no_nagle...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...port...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_entity_add_sic_rule: adding rules: apply_to: ME, peer: cn=cp_mgmt,o=MOLFSC01.enagas.eng.jrd7zd, d_ip: NULL, dport 18184, svc: lea, method: sslca
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_entity_add_sic_rule: adding INBOUND rule
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_entity_add_sic_rule: adding OUTBOUND rule
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_get_comm: creating comm for ent=8dff368 peer=8dfe9a0 passive=0 key=2 info=0
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] c=0x8dff368 s=0x8dfe9a0 comm_type=4
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Could not find info for ...opsec_client...
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_get_comm: Creating session hash (size=256)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_get_comm: ADDING comm=0x8df4e48 to ent=0x8dff368 with key=2
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_env_get_context_id_by_peer_sic_name: found context id=0 for peer sic name=cn=cp_mgmt,o=MOLFSC01.enagas.eng.jrd7zd
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_env_get_sic_handle_by_context_id: found sic handle (ctx id=0)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_sic_connect: connecting... (ctx id=0)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_get_comm: error in opsec_sic_connect
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] destroying comm 0x8df4e48
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Destroying comm 0x8df4e48 with 0 active sessions
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] pulling dgtype=ffffffff len=-1 to list=0x8df4e64
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] REMOVING comm=0x8df4e48 from ent=0x8dff368 with key=2
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Unable to make session
ERROR: failed to create session (NO Error)
DEBUG: function cleanup_fw1_environment
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Destroying entity 1 with 0 active comms
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_destroy_entity_sic: deleting sic rules for entity 0x8dff368
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] Destroying entity 2 with 0 active comms
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_destroy_entity_sic: deleting sic rules for entity 0x8dfe9a0
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] IpcUnMapFile: unmapping file (handle=0x8df46a8)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] IpcUnMapFile: unmapping file (handle=0x8df4790)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] IpcUnMapFile: unmapping file (handle=0x8df4810)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] IpcUnMapFile: unmapping file (handle=0x8df48b0)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] IpcUnMapFile: unmapping file (handle=0x8df4930)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] PM_policy_destroy: finished successfully.
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_destroy_sic_id_internal: Destroyed sic id (ctx id=0)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] opsec_env_destroy_sic_id_hash: Destroyed sic id hash
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] fwd_env_destroy: env 0x8dd7f40 (alloced = 1)
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] T_env_destroy: env 0x8dd7f40
[ 3046 4160468672]@MOL18107[13 Mar 18:38:12] do_fwd_env_destroy: really destroy 0x8dd7f40
DEBUG: function exit_loggrabber
DEBUG: function free_lfield_arrays
DEBUG: function free_afield_arrays
DEBUG: function free_lfield_arrays
DEBUG: function free_afield_arrays
[splunk@MOL18107 ~]$
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-03-2022
06:38 AM
|
