Monitoring Splunk

Possible bugs/typos

thipsz
Explorer

Propably event format for field transformations "outbound_interface_for_checkpoint" is incorrect and it should be "outbound_interface::$1"

Also fields extraction "opsec : REPORT-rule_for_opsec" refers to transform rule that doesn't exist.

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Not a question, contact the App Author to report bugs/typos.

http://apps.splunk.com/app/1454/ - Check Contact info in the Bottom Right.

alacercogitatus
SplunkTrust
SplunkTrust

No worries, please accept this answer if it addressed your need. Thanks!

0 Karma

thipsz
Explorer

My appologies.

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...