Hi all,
my question is regarding towards the addon of security Essentials.
i have different instances of Splunk running and all have there own Searches. I ingested these into Security Essentials (SE).
now i want to gather all of content of these different SE instances into one.
now what i dit was use the export function to JSON:
From there i got to the manege snapshots page and pressed the export button, here i got a JSON output encoded base64 code. this works!
But now!.. if i am searching on my bookmarks i need to restore each snapshot to see that content..
what i want is 1 snapshot with all my content in one (merge all snapshots together).
i tried to merge de contents of the sse_bookmarks_backup but then the restore button does not work.