Unable to run curl from Splunk search. Working fine from ssh session:   -bash-4.2$ curl -k -u admin:xxxxxxx https://localhost:8089/servicesNS/nobody/SA-ITOA/maintenance_services_interface/maintenance_calendar -X POST -H "Content-Type:application/json" -d '{"title":"TEST MW","start_time":"1591814852.152","end_time":"1592814852.364","objects": [{"object_type": "entity", "_key": "e7002b20-6b38-49ec-ad2a-29a0be0d2d65"}]}' {"_key": "5ee1d57e5575d4d6ee5710d1"} But below search throws error:   index=_internal | head 1 | eval header="{\"content-type\":\"application/json\"}" | eval data="{\"title\":\"TEST MW\",\"start_time\":\"1591814852.152\",\"end_time\":\"1592814852.364\",\"objects\":[{\"object_type\":\"entity\",\"_key\":\"e7002b20-6b38-49ec-ad2a-29a0be0d2d65\"}]}" | curl method=post uri=https://localhost:8089/servicesNS/nobody/SA-ITOA/maintenance_services_interface/maintenance_calendar splunkauth=true debug=true headerfield=header datafield=data   Please help. ... View more

Is there a way to include number of packets to check while using lookup ping? What I can see is default it is taking only 1 packet sent. ... View more

Hi All, Is there an option to handle API returned json data using Addon Builder? I want to sort a field in descending order and create a checkpoint against it. API doesn't have a feature/Method to sort by field. And one more question,if I do checkpoint using the sorted timestamp field, checkpoint always get events greater than the timestamp? Because API doesn't have a feature to include >timestamp field. My requirement is: Call the end point and index only unique values. Everytime I make a call , getting whole events again and again. The API is very basic and doesn't have some kind of filters and sorts. There is a timestamp field exist in the results that I can use in search to get dedup values but the license consumption is lot since we are getting same data again and again. Thanks ... View more

How to pass arguments to a script from inputs.conf? example: shell_script.sh server1 server2 ... View more

Please confirm if Network tool kit ping can ping only 10 servers? I can see only 10 results ... View more

Hi, I have a search that returns "os" field and using map I used to ping all host returned from the search using ping command.Is there a way to include os field into the ping result index? ... View more

The following url needs to be called for Networker Backup tool. Is ther an option to return currentdate and time in the below format and append it to URL in Splunk addon builder: 2019-01-01T10:15:00 https://networker-server-hostname:9090/nwrestapi/v3/global/backups?q=saveTime:['*2019-01-01T10:00:00*' TO '2019-01-01T10:15:00'] And first timestamp in the URL can be used as checkpoint 2019-01-01T10:00:00 Any idea? ... View more

Hi , Anyone had a package of sharepoint addon to monitor on-prem sharepoint? Or any suggestion to monitor sharepoint on-premise? Why sharepoint add-on is not available in splunkbase? Regards, Ansif ... View more

Is there a base_config available for Search Head Clustering configuration? If no, file approach of deploying SHC is not recommended? ... View more

Is that possible to create multiple kpi alerting per entity? Currently Multi KPI works only with aggregate service. ... View more

As per the document below: https://docs.splunk.com/Documentation/Splunk/7.3.3/Security/ConfigureSplunkforwardingtousesignedcertificates#Configure_your_forwarders_to_use_your_certificates We have to define sslRootCAPath under server.conf only on Linux machine and not for windows. In windows ,where we mention this attribute? ... View more

Hi All, Is there any recent test,conf discussion or doc around mentioned below splunk blog 2016: https://www.splunk.com/en_us/blog/tips-and-tricks/universal-or-heavy-that-is-the-question.html Is it still 6 times lower with UF? ... View more