About Markt13

Markt13 · ‎07-23-2022

I believe the 8.6 version is missing a few default lookups. I receive an error about unable to find "nix_fs_notification_change_type" lookup whenever we search. if you look at the doc and compare it to the \Splunk_TA_nix\lookups dir, there are at least 5 lookups missing. In 8.5 all 10 lookups are present. https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/Lookups. I suggest maybe copying the missing lookups or just staying on 8.5.

Markt13 · ‎11-30-2021

We are seeing duplicate host for windows in the infrastructure overview. The issue is VMware VMs that have the same host name appear as well as windows host. Has anyone else ran into the issue using ITSI or ITE?

Markt13 · ‎11-30-2021

Yeah that's the add-on but we are looking for an app that may replace the old one. Thanks for the help.

Markt13 · ‎09-23-2021

Hello I am looking to monitoring and review F5 Big-IP logs, but I see both F5 Security and F5 Networks are no longer supported by Splunk. Is there a newer app by Splunk that other people are using to monitor F5 logs or are both of these app usable in Splunk 8.2? Also we do currently review logs via syslog for now.

Markt13 · ‎08-18-2021

Hello @gcusello Thanks for the information and I have used the Splunk Platform Upgrade Readiness App. There were no issues with any of our apps since we don't have much installed. Again thanks for the help. Markt13

Markt13 · ‎08-17-2021

Upgrade to Splunk 8.2 from 7.3 we must install 8.1 first before 8.2. So is it okay to run the rpm -U for 8.1 and then 8.2 right after 8.1 finishes or should we wait until the entire 8.1 environment has been running for a few days? Any suggestions would be greatly appreciated.

Posts	6
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎08-21-2020

Online Status	Offline
Date Last Visited	‎07-23-2022 12:47 PM

Why is Splunk Add-on for Unix and Linux 8.6 missin...

Duplicate entity aliases found ITSI

F5 Apps

Splunk 7.3 to 8.2 upgrade

Why is Splunk Add-on for Unix and Linux 8.6 missin...

Duplicate entity aliases found ITSI

Re: F5 Apps

F5 Apps

Re: Splunk 7.3 to 8.2 upgrade

Splunk 7.3 to 8.2 upgrade