Possible bugs/typos - Splunk Community

Monitoring Splunk

Propably event format for field transformations "outbound_interface_for_checkpoint" is incorrect and it should be "outbound_interface::$1"

Also fields extraction "opsec : REPORT-rule_for_opsec" refers to transform rule that doesn't exist.

Not a question, contact the App Author to report bugs/typos.

http://apps.splunk.com/app/1454/ - Check Contact info in the Bottom Right.

No worries, please accept this answer if it addressed your need. Thanks!

My appologies.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...