https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328020#M4731 <P>Check if you have required app installed on Splunk Cloud search-head, looks you are referring to </P> <P>VirusTotal Malware Lookup for Splunk: <A href="https://splunkbase.splunk.com/app/4283">https://splunkbase.splunk.com/app/4283</A></P> <P>If not, raise a request for Splunk support for app installation.</P> Sun, 01 Mar 2020 04:42:04 GMT sumanssah 2020-03-01T04:42:04Z https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328018#M4729 <P>Getting error while performing below mentioned search </P> <P>_ index=symantec sourcetype=sep12:risk NOT actual_action= "Details pending" dest_nt_host=* | table dest hash_value | vt field="hash_value"_ </P> <P><STRONG>Search Factory: Unknown search command 'vt'.</STRONG></P> Tue, 29 Sep 2020 14:19:11 GMT https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328018#M4729 sumanssah 2020-09-29T14:19:11Z https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328019#M4730 <P>you likely need to set the commands.conf value to point to the app's python file, or you're not searching within the app</P> Thu, 31 Aug 2017 21:17:27 GMT https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328019#M4730 Bloodnite 2017-08-31T21:17:27Z https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328020#M4731 <P>Check if you have required app installed on Splunk Cloud search-head, looks you are referring to </P> <P>VirusTotal Malware Lookup for Splunk: <A href="https://splunkbase.splunk.com/app/4283">https://splunkbase.splunk.com/app/4283</A></P> <P>If not, raise a request for Splunk support for app installation.</P> Sun, 01 Mar 2020 04:42:04 GMT https://community.splunk.com/t5/Splunk-Dev/Virustotal-Splunk-Cloud-error/m-p/328020#M4731 sumanssah 2020-03-01T04:42:04Z