cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
rene_securelink
Engager
Member since: ‎08-02-2019
‎01-12-2023
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎08-02-2019
Activity Feed
View All

Re: Logs to local Hfs if on corp network else send...

by in Getting Data In
‎08-30-2019 04:11 AM
‎08-30-2019 04:11 AM
Hi Giuseppe, Thanks for the answer - one question if using 2 groups. For Cloud there is an certificate to be used. Could that not cause an issue for the internal HFs as it will not be the same? Or will each group use it's own certificate? [tcpout] defaultgroup = internalhf [tcpout:internalhf] server = hf1,hf2 sslCertpath = xyz sslRootCApath = xyz sslPassword = xyz [tcpout:cloud] server = cloud1,cloud2 sslCertpath = abc sslRootCApath = abc sslPassword = abc Thanks in advance René ... View more

Logs to local Hfs if on corp network else send to ...

by in Getting Data In
‎08-28-2019 05:01 AM
‎08-28-2019 05:01 AM
Laptop sends log to local HFs if connected to corp network - otherwise send logs to Splunk Cloud. Data should not end up redundant on the indexers. Is it possible to have this configured? ... View more

Windows Defender ATP - error after configuring con...

by in All Apps and Add-ons
‎08-02-2019 05:56 AM
1 Karma
‎08-02-2019 05:56 AM
1 Karma
Issue when configure connection string for Windows Defender ATP. Shows this in log file ta_windows_defender_windows_defender_atp_alerts.log : 2019-08-02 14:46:37,060 INFO pid=18110 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1 2019-08-02 14:46:38,018 INFO pid=18110 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1 2019-08-02 14:46:39,513 INFO pid=18110 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1 2019-08-02 14:46:41,071 INFO pid=18110 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1 2019-08-02 14:46:42,585 INFO pid=18110 tid=MainThread file=splunk_rest_client.py:_request_handler:100 | Use HTTP connection pooling 2019-08-02 14:46:42,586 INFO pid=18110 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1 2019-08-02 14:46:42,600 INFO pid=18110 tid=MainThread file=setup_util.py:log_info:114 | Proxy is not enabled! 2019-08-02 14:46:42,770 ERROR pid=18110 tid=MainThread file=base_modinput.py:log_error:307 | No JSON object could be decoded 2019-08-02 14:46:42,771 ERROR pid=18110 tid=MainThread file=base_modinput.py:log_error:307 | Get error when collecting events. Traceback (most recent call last): File "/opt/splunk/etc/apps/TA_windows-defender/bin/ta_windows_defender/modinput_wrapper/base_modinput.py", line 127, in stream_events self.collect_events(ew) File "/opt/splunk/etc/apps/TA_windows-defender/bin/windows_defender_atp_alerts.py", line 88, in collect_events input_module.collect_events(self, ew) File "/opt/splunk/etc/apps/TA_windows-defender/bin/input_module_windows_defender_atp_alerts.py", line 151, in collect_events "Authorization": 'Bearer ' + access_token, TypeError: cannot concatenate 'str' and 'NoneType' objects ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎01-12-2023 11:32 PM
Karma from
View All