| | I want to alert when a user has a consistently high number of failed logins over a given time period - e.g. if over 3... 0 0 | 0 | 0 | |
| | I am writing a shell script which get executed after an alert. How can i see the logs of the script run? I noticed th... 0 0 | 0 | 0 | |
| | We use Splunk to support legacy reporting, publishing scheduled search results as documents to remote AD network shar... 0 0 | 0 | 0 | |
| | hi, I am trying to restrict a user with role no access to any indexes and trying to share a report at app level( wit... 0 5 | 0 | 5 | |
| | Hi, I have a lookup file which has the manager names and each manager has got few employees under them . Now i want ... 0 4 | 0 | 4 | |
| | Hi all, I am trying to create a shell script periodically with crontab to run a Splunk search query, and if there ar... 1 0 | 1 | 0 | |
| | We need a license usage report based on data in a log file. I built a search that extracts the following data, _tim... 0 2 | 0 | 2 | |
| | I have a KV store defined on my search head, which is not replicated. I'm populating it with data with a scheduled s... 0 5 | 0 | 5 | |
| | Team I would like to ask if you have ever seen similar type of error message that I am experiencing it while trying ... 0 0 | 0 | 0 | |
| | My notification isn´t work, i have this two errors in the index=_internal -0600 ERROR sendemail:137 - Sending email.... 0 0 | 0 | 0 | |
| | Hello, We have a search that will show both an Active Directory account that has been set to expire and it will also... 0 3 | 0 | 3 | |
| | Hi, We are using Splunk managed cloud services and I am trying to send an alert using Search Processing Language. S... 0 1 | 0 | 1 | |
| | Hi, I want to implement splunk alert in below way : Please let me know how it can achieve? I am querying the CPU ut... 0 4 | 0 | 4 | |
| | My requirement is to customize the "/reports" endpoint and hide out some of the features available for a user, like c... 0 0 | 0 | 0 | |
| | I want to schedule a cron alert that should run every 5 minutes between 8PM to next day 8 AM for daily. How to sched... 0 2 | 0 | 2 | |
| | How to start a saved search using REST API URL? I can make a GET the saves searchs, extract the 'search' expression ... 3 4 | 3 | 4 | |
| | enter code hereHi Team, We have an application platform which is gateway for multiple applications[1000+ apps], we h... 0 2 | 0 | 2 | |
| | I'm trying to embed an image inside the alert email on my 6.2 Splunk instance The triggered email is translating my ... 1 2 | 1 | 2 | |
| | Hello, I have a custom alert action that was working a few days ago and now I'm getting this error and the log is no... 0 1 | 0 | 1 | |
| | I'm trying to see if there's a way to monitor who accesses Splunk and create alerts around that? 2 1 | 2 | 1 | |
| | I have about 1TB of machine data as CSV files primarily feeding health/metric data about the different-sub systems in... 2 0 | 2 | 0 | |
| | Hi there, I am trying to configure alert that should run a script. Below are the contents of script. sms-sending-api... 0 4 | 0 | 4 | |
| | To elaborate,, I currently have active directory logs on Splunk. I need to find out the location of login, I have log... 0 1 | 0 | 1 | |
| | I have just been pushed into the deep end of the Splunk pool and I need to figure something out. I have ITSI and wit... 1 2 | 1 | 2 | |
| | When trying to execute a savedsearch from the CLI, I receive the following error in splunkd.log: ERROR SearchOperato... 0 1 | 0 | 1 | |
