All Apps and Add-ons

Is there a way to identify the Salesforce Org Name/ID from which the data is being pulled in the data itself by means of a field name?

vvarghes6
Explorer

Currently, we are successfully able to pull the data from our various Salesforce Org using the Add-on, but we would like to differentiate the data based on the Salesforce OrgName/OrgID from which the data is pulled. It looks like we currently pulling the data based on the Object Name/EventLogtype.

0 Karma

pdwittman
Engager

You might try differentiating your data-sets by index, for example we have indexes names like: app1_prod; app1_uat; app2_prod; app2_dev; app3_prod, app3_qa; etc... We have to manipulate the dashboard code & eventtypes and such to account for this, but it works well for us...

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...