Hello
I tried to run Local passive DNS. But I just got this massage without working.
Error in 'SearchParser': The search specifies a macro 'cim_Network_Resolution_indexes' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission for the macro, or the macro has not been shared with this application. Click Settings, Advanced search, Search Macros to view macro information.
Is there any solution for this?,Hello
Thanks a lot of your help. I helped to go next page. However the problem raised like it gave no results.
I have really no idea how do I make the local passive DNS work.
,
Pls check if your search head has CIM add-on installed. The above macro is part of that app. https://splunkbase.splunk.com/app/1621/
Thanks a lot. This helpled me to go next page. However the local passive DNS gave no results.
I have really no idea how do I make it work.