All Apps and Add-ons

Tip for those using this app

reswob4
Builder

So I've found that to get these dashboards to work in my environment, I had to make the following changes in all the searches:

change hg_event_description to cef_name
change hg_event_type to cef_signature
change hg_threat_score to cef_severity

(just a reminder: on each dashboard, click on "Edit" then "Edit Source", make the changes in the xml, then click "Save")

0 Karma
1 Solution

reswob4
Builder

need to mark this as answered...

View solution in original post

0 Karma

reswob4
Builder

need to mark this as answered...

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...