| | Is there a way to find/list all sources( summary-index-populating reports, saved search) which calculate and send dat... 0 2 | 0 | 2 | |
| | I'm running nginx with the below security config. add_header X-Frame-Options "SAMEORIGIN" always; add_header X-XSS-P... 0 1 | 0 | 1 | |
| | My custom search command required some credentials to work (third party lib auth) and I don't want to have it hardcod... 0 1 | 0 | 1 | |
| | Hi everyone, I was wondering if anyone here has got a wide range of experience in administrating and maintaining a h... 0 3 | 0 | 3 | |
| | Good Morning Is it possible to clone my indexer machine or Search Head and the license still valid? If it is not p... 0 3 | 0 | 3 | |
| | We are wondering whether setting a data model helps when using Tableau. Any ideas? 0 2 | 0 | 2 | |
| | Hi everybody, I was reading https://answers.splunk.com/answers/560188/logic-behind-geographically-improbable-access-... 0 2 | 0 | 2 | |
| | Hi everyone, I'm planning to create some indexes for compliance requirements to remove the old data. I wanted to sta... 0 5 | 0 | 5 | |
| | In a clustered environment roles defined and mapped for LDAP authentication configured in Deployer (shcluster/apps) a... 0 3 | 0 | 3 | |
| | Hello, I've been working on this w/ Splunk Support and we recently discovered that having user_group="*" was causing... 0 0 | 0 | 0 | |
| | All, I just installed Splunk_TA_nix and noticed that it's tags are quite expensive. I'd like to limit the knowledge... 0 1 | 0 | 1 | |
| | Hi all, I would like to hide password at payload_printable field in event log from suricata json.eve. {"timestamp":... 0 2 | 0 | 2 | |
| | Hi All , below is my sample data. We are receiving data using key=value pairs like below. time=time1 | dest_ip=abmn... 0 3 | 0 | 3 | |
| | Hii all, I have created a copy of splunk instance, in the same server for testing purpose.. in this new splunk we wil... 0 4 | 0 | 4 | |
| | Hello, I have installed two Splunk instances and I want to dedicate one as a search head and other as an Indexed. Pl... 0 3 | 0 | 3 | |
| | I'm trying to make a Swimlane search to use the Authentication Datamodel, and the Privileged Authentication Dataset, ... 0 6 | 0 | 6 | |
| | I familiar with the feature 'Reassign Knowledge Objects'. We use this feature when we want to reassign objects to a u... 0 1 | 0 | 1 | |
| | I had been successfully using a custom Dockerfile to create a Docker container based on the Splunk-provided Docker im... 0 1 | 0 | 1 | |
| | We have hundreds and hundreds of saved searches and dozens of Alerts. I need the power user role to be able to edit a... 0 3 | 0 | 3 | |
| | We have hundreds of saved searches/reports/alerts. I need the power users role to be able to edit and maintain them,... 0 1 | 0 | 1 | |
| | I'm trying to tag specific data to a category name and only return data that matches the tag. For example, index =... 0 3 | 0 | 3 | |
| | I am trying to do a search in Splunk that applies only eventtypes that are owned by my account to the events found. T... 1 3 | 1 | 3 | |
| | I have a Splunk Enterprise on-prem instance with about 700 gb of data. I need to migrate to Azure. I created an insta... 0 2 | 0 | 2 | |
| | Hi All, Ours is a distributed environment and I am planning to upgrade Splunk search heads which are currently runnin... 0 9 | 0 | 9 | |
| | I have created a lookup. fairly basic 2 columns, column 1 has an ID the second a search string. ID searchstr... 0 3 | 0 | 3 | |
