Other Using Splunk

Other Using Splunk
Category Activity
totaro
Hi would like to check if this is possible: Lets say i have an 2 alert: alert A: check auth log for locked out in pas...
by totaro Explorer in Alerting 07-30-2019
0 3
0
3
rlautman
Is it possible to configure Splunk to monitor an Outlook inbox? One solution I have considered is configuring the in...
by rlautman Path Finder in Reporting 07-30-2019
0 4
0
4
danielbb
We were instructed that our teams will need to migrate the alerts from individual accounts to generic ones as any emp...
by danielbb Motivator in Alerting 07-29-2019
0 6
0
6
pranay_adla
have a custom alert action scripts which have UI. If I give a fieldname in UI that needs to get value from search res...
by pranay_adla Explorer in Alerting 07-29-2019
0 1
0
1
siddharthparuch
In the above dashboard, i want to input the Extension drop down box in each row of the report visible below in the co...
by siddharthparuch New Member in Alerting 07-29-2019
0 1
0
1
anandhalagarasa
Hi Team, Usually the keyword "College Begins" would be repeated nearly 4 times in a minute in logs. So i want to...
by anandhalagarasa Path Finder in Alerting 07-27-2019
0 2
0
2
tstewartpf
I've created a GuarDuty finding alert in splunk but I want to exclude any findings from the alert that have specific ...
by tstewartpf New Member in Alerting 07-26-2019
0 5
0
5
matt
The sendemail.py script seems to want to support the sending of pdfs, but I can't trick it into actually delivering o...
by matt Splunk Employee Splunk Employee in Reporting 07-26-2019
6 4
6
4
danielbb
We are looking at ES with its extensive datamodels. I wonder whether all the fields in a datamodel become index-time ...
by danielbb Motivator in Reporting 07-25-2019
1 2
1
2
gcusello
Hi at all, i have two different Splunk systems and I need to send some alerts from one system to the other one. what'...
by SplunkTrust SplunkTrust in Alerting 07-25-2019
0 1
0
1
nick405060
Alerts no longer email, however they do show up in triggered alerts. This started sometime yesterday, before that we ...
by nick405060 Motivator in Reporting 07-25-2019
1 2
1
2
aqaadi
while emailing results i'm observing the below error: command="sendemail", 'rootCAPath' while sending email to:blah@...
by aqaadi Engager in Reporting 07-24-2019
0 0
0
0
3DGjos
Hello, i'm making alerts for a client, we need 2 alerts, one of them was very easy to make: Running on cron schedule...
by 3DGjos Communicator in Alerting 07-24-2019
0 0
0
0
kiril123
I am trying to edit Summary Index for the scheduled search. I am getting the following error message: This saved se...
by kiril123 Path Finder in Reporting 07-23-2019
0 4
0
4
dcascione
Hello - I've created a bunch of real-time alerts in Splunk Enterprise 6.52 and want to log each triggered event to an...
by dcascione Explorer in Alerting 07-23-2019
0 11
0
11
Becherer
I am looking to create a dashboard panel that is synced with our AV tool. The tool that we use is sending events to s...
by Becherer Explorer in Alerting 07-23-2019
0 1
0
1
nicolezoell
I wanted to create an email alert when no data is tranfered to splunk, so by 0 results. But the search by alert alway...
by nicolezoell New Member in Alerting 07-23-2019
0 2
0
2
lewisn
Hello everyone. I have slack alerts with details that aren't relevant to every team member, and I would like to obfu...
by lewisn Engager in Alerting 07-23-2019
1 0
1
0
ashutoshab
I have created a scheduled alert that looks for results over a time period and if there are events, it has to send an...
by ashutoshab Communicator in Alerting 07-23-2019
0 11
0
11
singriajay
Hi Team, I have used the below search to find the top senders eventtype=cisco-esa | transaction keepevicted=true i...
by singriajay Explorer in Alerting 07-23-2019
0 3
0
3
jimams
The scenario: via REST API, a scheduled search runs and updates an index, it adds values: Field1='A', Field2='1'; th...
by jimams New Member in Reporting 07-22-2019
0 0
0
0
krsuraj11
Is there anyway we can email the whole dasboard item to someone. I want to email my dashboard to my seniors for their...
by krsuraj11 New Member in Reporting 07-22-2019
0 2
0
2
memorecks
Hi Guys, I’m trying to setup a notification scheme in Alert Manager. I was able to generate one notification, after ...
by memorecks New Member in Alerting 07-22-2019
0 0
0
0
username_forbid
Hi everybody! I know that my question could sounds primitive for senior Splunkers but I don't have other way to get ...
by username_forbid New Member in Alerting 07-21-2019
0 0
0
0
lespinoza212
Hello, Recently we got Splunk upgraded to version 7.2.5.1 and one of my alerts have been triggering not following it...
by lespinoza212 New Member in Alerting 07-19-2019
0 4
0
4
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...