Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sshres5
sshres5
Communicator
Member since:
08-09-2016
02-03-2024
Community Statistics
| Posts | 41 |
| Solutions | 2 |
| Karma Given | 4 |
| Karma Received | 3 |
| Member Since | 08-09-2016 |
Activity Feed
- Karma Re: Search Summary Page Automatically Runs Real-Time Searches? for richgalloway. 01-13-2021 03:18 PM
- Got Karma for Unable to access splunkweb remotely on splunk 7.02. 06-05-2020 12:49 AM
- Karma Splunk DB Connect 2: Fails to connect to MS SQL using configured identity for cjj1977. 06-05-2020 12:48 AM
- Karma Re: Copy Dashboard from one App to another for chimell. 06-05-2020 12:47 AM
- Got Karma for Re: REST API Modular Input: How to poll a REST API at a specific time, every day?. 06-05-2020 12:47 AM
- Got Karma for Re: REST API Modular Input: How to poll a REST API at a specific time, every day?. 06-05-2020 12:47 AM
- Karma Re: Finding search strings when all you have is an expired SID for chris. 06-05-2020 12:46 AM
- Posted Re: Splunk DB Connect: How to resolve MySQL connection error "Failed to initialize pool: Communications link failure"? on All Apps and Add-ons. 07-13-2018 01:40 PM
- Posted Re: REST API Modular Input: How to poll a REST API at a specific time, every day? on All Apps and Add-ons. 06-14-2018 02:53 PM
- Posted Re: Unable to access splunkweb remotely on splunk 7.02 on Security. 04-05-2018 12:58 PM
- Posted Re: Splunk DB Connect: How do I use epoch time when extracting the data time information? on All Apps and Add-ons. 03-28-2018 09:36 AM
- Posted Re: Unable to access splunkweb remotely on splunk 7.02 on Security. 03-24-2018 07:25 AM
- Posted Re: Unable to access splunkweb remotely on splunk 7.02 on Security. 03-24-2018 07:25 AM
- Posted Unable to access splunkweb remotely on splunk 7.02 on Security. 03-23-2018 04:54 PM
- Tagged Unable to access splunkweb remotely on splunk 7.02 on Security. 03-23-2018 04:54 PM
- Posted Re: BeyondTrust Retina logs through Splunk HTTP Event Collector on Getting Data In. 07-28-2017 09:18 AM
- Posted Re: BeyondTrust Retina logs through Splunk HTTP Event Collector on Getting Data In. 07-28-2017 09:15 AM
- Posted Re: BeyondTrust Retina logs through Splunk HTTP Event Collector on Getting Data In. 07-25-2017 01:58 PM
- Posted Re: BeyondTrust Retina logs through Splunk HTTP Event Collector on Getting Data In. 07-25-2017 12:05 PM
- Posted Re: BeyondTrust Retina logs through Splunk HTTP Event Collector on Getting Data In. 07-25-2017 11:32 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
07-13-2018
01:40 PM
So, it might not be your host firewall that is causing the issue. It will be the connectivity between your DB connect host and where you are trying to query.
run following
nc -vz port
... View more
06-14-2018
02:53 PM
2 Karma
My cron doesn't run for rest_ta polling, nor does time. Is anyone facing the same issue? I have dbconnect on the same host, and doesn't have any issues for its cron or time polling?
... View more
04-05-2018
12:58 PM
The issue was on network level. They had selective rule. New firewall rule fixed the issue
... View more
03-28-2018
09:36 AM
I got this working by using the following:
SELECT CAST(date '1970-01-01' + (1/24/60/60/1000) *epoch_column AS timestamp) AS date_time, epoch_column
... View more
03-24-2018
07:25 AM
Yeah have tried it... I can see web service being turned on. And web_service.log has no Errors either
... View more
I have all the firewall disabled. And I also see splunkd is listening on port 8000, but I am not able to connect it via web browser.
Moreover, I can telnet to the port from my desktop, but nothing on web browser.
I already updated allowRemoteLogin=always and admin password.
Any ideas what might be the issue?
... View more
- Tags:
- splunk-enterprise
07-28-2017
09:18 AM
But one thing I noticed was test didn't have issues as the logs didn't have any time on it. So it took indexing time. But the real logs have time, and gets screwed.
... View more
07-28-2017
09:15 AM
Yeah time is off. Haven't had time to do a research on how to fix it. Props doesn't work either.
... View more
07-25-2017
01:58 PM
I don't have any props or transforms as of now.
... View more
07-25-2017
12:05 PM
No. It was under Configure -> Connectors
Do you have that options? I got access through the webpage, not the actual console
... View more
07-25-2017
11:32 AM
Well, I don't own Beyond Trust application. However, they provided me access to console to troubleshoot. I just needed to add the following on the configuration page of BT
Host Name:
Port:
Splunk Index:
Splunk Sourcetype:
Splunk Source:
Then at the bottom they had a panel to checkmark what to send or something similar
... View more
07-25-2017
11:14 AM
Yeah we finally got it working. It was firewall issue.
... View more
06-27-2017
02:41 PM
Yeah my query already has it.
... View more
06-26-2017
03:24 PM
We upgraded the db connect to the new version 3 but now we are facing the issue of not being able to get data. Moreover the ORDER BY seems to be causing the issue.
We are trying to pull 1000-100000s of row per minute and not getting any success. The query works in the first place, as we are able to preview the data on Choose and Preview Table. As well as able to get data in Splunk itself before it breaks down on next attempt 😞
... View more
06-05-2017
01:51 PM
I am trying to on board Retina logs through HTTP Event Collector, however I am not having any luck on it.
Firewall has been opened, and I can see it being allowed, but it is not reaching the HEC.
We can see the below error when we try
SplunkClient.SendApiRequest failed with error 'The remote server returned an error:(404) Not Found'.
Not sure where the issue is, we have tried couple of different end points. However, I can use curl to send data. Has anyone on boarded data through HTTP Event Collector for BeyondTrust Retina?
... View more
03-16-2017
02:06 PM
Can the syslog forward the Netapp filer cifs logs to centralized syslog server?
... View more
01-23-2017
01:21 PM
Anybody have had any success on it? Running through the same issue.
... View more
01-22-2017
08:58 AM
So I got this working by manually appending the inputs.conf file's tail rising value and then using 'where' clause in the Rising column's SQL query.
... View more
01-22-2017
08:52 AM
So yes, Firewall turned out to be the culprit. Once the firewall rule was implemented, DB connect was able to connect the DB without any issues.
... View more
01-11-2017
01:48 PM
So yes, the location of the props.conf was the issue. Once I moved it to the forwarder TA in HF, it works as a charm.
Thanks @somesoni2
This document has details on it.
http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings%3F
So if you are using HF, parsing needs to be done on HF.
... View more
01-11-2017
11:58 AM
Looks like it is a Firewall issue. Will let y'all know if that was the reason for this.
... View more
01-09-2017
12:29 PM
I was able to get the query right, however 0 rows returned.
where TIMESTAMP >= timestamp'2017-01-01 00:00:00'
... View more
01-09-2017
12:22 PM
Trying to setup a connection through Splunk DB Connect to MySQL dB. However receiving following error:
com.zaxxer.hikari.pool.HikariPool$PoolInitializationException: Failed to initialize pool: Communications link failure The last packet sent successfully to the server was 0 milliseconds ago. The driver has not received any packets from the server.
Has anyone seen this error before? We just added mysql jar on the lib to have DB connection with mysql.
mysql-connector-java-5.1.40-bin.jar on our UNIX box
... View more
01-06-2017
09:59 AM
tail_rising_column_checkpoint_value = 1340340698871
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-03-2024
02:49 PM
|
