Hi All, do you know if we can tell from Splunk what encryption protocols are used for NetScaler queries? There is no App stream add-on configured for this. Is there any way for checking for Netscaler encryption protocls sucjh as TLS, SSL versions by splunk search? Index=*vmcnsx IPFIX TLS It returns” tls-inspection-certificate-dump.command” as an example in the message. what does this means? ... View more

Hi All, I need to re-import new XML metaddata to the Splunk Cloud SAML Configuration which is generated for Azure SSO users. The current cert is valid until 19/02/2023. The issue is when I try to import the new xml (federationmetadata.xml) into the SAML configuration in the Splunk It constantly encounters the error “There are multiple cert,idepCertPath,idpCert.pem, must be directory" Try to remove the idpCert.pem in the ./etc/auth/idpCerts/idpCert.pem, and shows Server Error. I don't know how I can find the path ( ./etc/auth/idpCerts/idpCert.pem) in the Splunk cloud as it is not on=premises. I really need your help as the current valid will expired very soon (19/02/2023)and results in users and admins being locked out of Splunk Cloud. Any way to fix it. """urgent to solve""" Many thanks, Goli @tlam_splunk @gcusello  I would greatly appreciate it if anyone could help me!   ... View more

Searches Delayed Root Cause(s): The percentage of non high priority searches delayed (22%) over the last 24 hours is very high and exceeded the red thresholds (20%) on this Splunk instance. Total Searches that were part of this percentage=147626. Total delayed Searches=32735 How we can permanently solve this issue ... View more