topic Box Add-On Full Path for Items in All Apps and Add-ons

Box Add-On Full Path for Items

kprior201_lilly — Thu, 02 Jan 2020 20:25:51 GMT

In the release notes for 2.1.0 Splunk Add-On for Box, it mentions "Ability to enable viewing of the entire parent structure of an asset.". I've yet to see this in any events. I've enabled all of data collection capable that is specified in the inputs.conf.spec. I'm not really sure what I'm missing. Anyone have any ideas? It would be incredibly useful to have the entire parent path.

Thanks!

Re: Box Add-On Full Path for Items

kamlesh_vaghela — Wed, 30 Sep 2020 03:37:39 GMT

@kprior201_lilly

I think it should be in location field. Can you please search location filed in box:file OR box:folder?

Also make sure path_collection in box.conf.

[box_default]
folder_fields = ...,path_collection,...
file_fields = ...,path_collection,...

Box 2.1 has this field,if it is not there means any local copy of box.conf with same stazna and property may there which can impact collection of location field.

Re: Box Add-On Full Path for Items

kprior201_lilly — Tue, 07 Jan 2020 15:54:03 GMT

Okay; if you leave the folder/file fields empty, I was assuming it would just pull ALL of the fields. I'll add the path_collection to them and see if it makes a difference.

Thank you.

Re: Box Add-On Full Path for Items

kprior201_lilly — Wed, 08 Jan 2020 17:31:20 GMT

This worked. I feel silly. Thank you!!

Re: Box Add-On Full Path for Items

kamlesh_vaghela — Fri, 10 Jan 2020 05:51:52 GMT

Great @kprior201_lilly

Can you please upvote & accept this answer and close it?