https://community.splunk.com/t5/Getting-Data-In/ThreatHunting/m-p/570799#M101151 <P>Most probably, because something is wrong.</P><P>But seriously, it's waaaay too little information for any help. Be more specific.</P> Wed, 13 Oct 2021 15:44:02 GMT PickleRick 2021-10-13T15:44:02Z https://community.splunk.com/t5/Getting-Data-In/ThreatHunting/m-p/570797#M101150 <P>Why doesn't threathunting index receive mapped data from sysmon (windows index)?</P><P>By the way, I edited <SPAN>&nbsp;the macro's to suit my environment but it still didn't work.</SPAN></P> Wed, 13 Oct 2021 15:41:47 GMT https://community.splunk.com/t5/Getting-Data-In/ThreatHunting/m-p/570797#M101150 long 2021-10-13T15:41:47Z https://community.splunk.com/t5/Getting-Data-In/ThreatHunting/m-p/570799#M101151 <P>Most probably, because something is wrong.</P><P>But seriously, it's waaaay too little information for any help. Be more specific.</P> Wed, 13 Oct 2021 15:44:02 GMT https://community.splunk.com/t5/Getting-Data-In/ThreatHunting/m-p/570799#M101151 PickleRick 2021-10-13T15:44:02Z