Other Using Splunk

Category Activity

Using a child data model to reduce search i'm trying to create a data model with child subsets and calling this in a search. However the searches are calling t... by thomala New Member in Reporting 02-12-2020 0 0	0	0
scheduled reports with zero values We have 3 search heads and they are in cluster.We are observing scheduled reports with zero values for few reports.ze... by shivanandbm Explorer in Reporting 02-12-2020 0 12	0	12
Schedule a custom search command to run for 100+ different variables We have several searches that we run and have a manual backend process to load that data to each endpoint (100+ endpo... by cdhippen Path Finder in Reporting 02-11-2020 0 6	0	6
still not sending email for alerts hi! I added an alert and I configured it so that it will send an email once the alert triggers, here are the configu... by mdmaala Communicator in Alerting 02-11-2020 0 5	0	5
How do I debug alert emails not sending in Splunk Cloud? We have an alert that sends emails when triggered, and up until a few weeks ago it successfully sent emails to a comp... by jdreaver Explorer in Alerting 02-11-2020 0 10	0	10
Can I set an alert in splunk where the event id is 4663, with this object specifications? Object: Object Server: Security Object Type: ... by akim08 Engager in Alerting 02-11-2020 0 13	0	13
Why is sendemail not using correct mailserver? Hello, I've been trying to get my splunk instance to send out email alerts using Amazon SES SMTP server without much... by davidblader New Member in Alerting 02-10-2020 0 3	0	3
What is the best way to ingest links from the body of emails O365 Exchange or Mimecast? I am currently ingesting O365 Exchange and Mimecast logs in to Splunk, but I would like to start ingesting any links ... by benwebsternucle Engager in Reporting 02-10-2020 0 1	0	1
Recheck the alert, after the alert is raised I have configured an alert to notify by Microsoft Teams when CPU threshold reached to 90%. The alert comes when it re... by varmamkm New Member in Alerting 02-10-2020 0 0	0	0
how to setup a triggered alert on a index based on usage? Hello, I would like to setup ongoing alert to be triggered anytime an index ingests 20gb of logs. This is to preven... by user543210 New Member in Alerting 02-07-2020 0 1	0	1
how to disable the list of saved searches in savedsearches.conf? Just adding the below stanza wuld be sufficient to disable a saved search in default/savedsearches.conf disabled = 1 ... by pavanae Builder in Reporting 02-07-2020 0 2	0	2
How to pass the username OR name of the savedsearch as parameters into the alert action itself? Hi, I have an alert action that triggers a python script; In the intended workflow, this alert action can either ... by tzhang_gr New Member in Alerting 02-07-2020 0 5	0	5
can we get the previous results of scheduled report? Hello splunkers, I have report scheduled to run 0 minutes past every hour to generate the tabular results for last 60... by chaitanya1996 Engager in Reporting 02-07-2020 0 7	0	7
Schedule PDF Option unclickable on my Dashboards Hi I would like to schedule PDF Delivery from a Dahsboard but the link is unclickable My role role includes the sche... by erwanlebaron Engager in Reporting 02-07-2020 0 3	0	3
Dynamic Alerts for 300 ID,s bases on Field values coming to Splunk Hi , We have 300 Queues which continually stores the data into Splunk every 5 mins. Each queue there is a Thresholdt... by manikanthkoti Explorer in Alerting 02-06-2020 0 3	0	3
Splunk sendemail works but alerting doesn't with similar config Hi everyone, We are trying to configure emails sending from Splunk through our SMTP server. When i run index=test sou... by lglopes Explorer in Reporting 02-06-2020 1 6	1	6
Can I change the duration of expiration for "link to results" in Alert mail? I have created an Alert and configured it to "Triggered Alerts" and "Send email". I want the "link to results" sent i... by suchi01 New Member in Alerting 02-06-2020 0 3	0	3
FEATURE REQUEST: Splunk Alerts: Please enable to send All Clear/ Resolved Notification Hi all, We are currently using Splunk v 7.2. I am integrating Splunk with OMI and seeing issues in configuring the s... by nellurineha123 New Member in Alerting 02-06-2020 0 0	0	0
Rest call SPL to change ownership of a saved search I know the rest api command to change the ownership of a saved search. Below is the command. I want to know correspon... by rajim Path Finder in Reporting 02-06-2020 0 3	0	3
Unbalanced Load Alert I want to be alerted when the motor load on a machine is more than 10 higher or lower than the other motor load (they... by alamo1212 New Member in Alerting 02-05-2020 0 1	0	1
Splunk scheduled weekly report used to take 30 mins, now takes more than 20 hrs Hello Community, We have a scheduled weekly report that used to take 30 mins, now takes more than 20 hrs to complete ... by swamysanjanaput Explorer in Reporting 02-05-2020 0 1	0	1
How pull a file from host that triggered alert I've been searching for a way to pull a file from Splunk universal forwarder installed host, but couldn't find anythi... by batuhankutluca Explorer in Alerting 02-05-2020 0 5	0	5
Splunk Dashboards 100% loaded - Generating PDF Hi We are looking to generate PDF form the results we have on a dashboard.We are using Selenium to log in and extract... by robertlynch2020 Influencer in Reporting 02-05-2020 0 0	0	0
When I clicked "view results" on alert mail, "The search you requested could not be found." message was showed in display. I set an alert that works everyday and sends mail. Today I clicekd "view results" on alert mail, then "The search you... by yutaka1005 Builder in Reporting 02-04-2020 0 7	0	7
expose alerts with API Hello How can I expose alerts using the API ? i've created a saved searches. thanks by sarit_s Communicator in Alerting 02-04-2020 0 12	0	12