All Apps and Add-ons

Typo in test search for "Stale Account Usage/Accelerated Data/Must have a node for Successful Authentication ..." (SSE 2.4.1)

chris_barrett
SplunkTrust
SplunkTrust

The 'nodename="Authentication.Successful_Authentication"' is before the 'where' in the test search - it should be after it.

Spotted in SSE 2.4.1

0 Karma
1 Solution

David
Splunk Employee
Splunk Employee

Fixed in dev! This will be shipped in SSE 2.4.2, thank you!

View solution in original post

0 Karma

David
Splunk Employee
Splunk Employee

Fixed in dev! This will be shipped in SSE 2.4.2, thank you!

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...