Other Using Splunk

Category Activity

How to check if certain events occurs N consecutive times? Hi Splunkers, I have to build a rule, based on Windows Logs (XML ones), that must check this: Notify me is there are ... by SplunkExplorer Contributor in Other Usage 06-21-2023 0 3	0	3
RegEx Help - how to extract the numbers from string? Hi, For given sample data set, how can I extract all the numbers (will be always 3 digits) from desc? \| makeres... by madhav_dholakia Contributor in Other Usage 06-21-2023 0 3	0	3
How do I set up an email notification alert with correlated field? I have correlation search creating notable event. the name correlation search testemail. I want to notifying all th... by abi2023 Path Finder in Other Usage 06-20-2023 0 0	0	0
How to create an alert that will search for events appearing consecutively for 5 mins? I'm trying to create an alert for [index="abc*" \| spath "LogMessage.message.msg" \| search "LogMessage.message.msg"="s... by darshikapathak Loves-to-Learn Lots in Other Usage 06-20-2023 0 4	0	4
How can I run a python script to send Splunk alert in Centreon? Hi I need a python script template to calls the centreon API and to send a Splunk alert in this monitoring tools Cons... by jip31 Motivator in Other Usage 06-20-2023 0 2	0	2
Is there a query to identify which password requirements are not being met? Hi Everyone, I am trying to see if there is a query I can run that will tell me which of our password requirements a ... by monik0277 New Member in Other Usage 06-19-2023 0 2	0	2
opt/splunk/share/splunk/pdf Hi everyone,There are some .js files under the pdf directory. I assume they are used when we export the dashboards to... by vikesh05 Explorer in Other Usage 06-19-2023 0 1	0	1
How to send notification as a part of alert action to MS Teams? Hi There, I need to send notification to MS Teams as a part of alert action, How i need to configure that? Tha... by smanojkumar Contributor in Other Usage 06-16-2023 0 1	0	1
How do you disable/enable alerts via the REST API? Edit: Answer is as follows. Method: POST Endpoint: https://mysplksvr:8089/servicesNS/nobody/search/saved/searches/My... by tmontney Builder in Alerting 06-15-2023 0 5	0	5
Why is alert not triggering when string value is empty? Hi, I have a Splunk alert where the trigger condition should be:search ABC == "", where ABC is a string field and the... by POR160893 Builder in Other Usage 06-12-2023 0 3	0	3
Why can't I change alert with REST- It change permission from app to private? Hi We have lot of alert where we need to change alert.email.to recipients to new one. Those alerts are in SHC and tho... by isoutamo SplunkTrust in Other Usage 06-12-2023 0 1	0	1
How to create a boolean logic validation checker for a match? Hello, I am looking to create a Boolean logic validation checker for a match. I am attempting to use makeresults in a... by Coryfindley Engager in Other Usage 06-11-2023 0 6	0	6
How to count monthly number of alerts in enterprise security? Hello Splunkers i need your help in creating a search to count number of alerts by months that would fit in a colum... by msalghamdi Path Finder in Other Usage 06-11-2023 0 2	0	2
How to create regex for AWS ARN to extract region? Please help to create regx to extract region from below aws ARN(us-west-2) arn:aws:secretsmanager:us-west-2:111111111... by chvenu17 Path Finder in Other Usage 06-09-2023 0 4	0	4
Is it possible for Splunk On-Call to export schedule to CSV instead of a calendar? We use Splunk On-call and instead of exporting the on-call schedule to a calendar we want to export to a CSV for our ... by bsabot New Member in Other Usage 06-09-2023 0 0	0	0
Splunk downloaded csv is converting special symbols like Ω, µA into different symbols? Hello Team, We have some special symbols which are in our application like Ω, µA etc.. We are able to export data fro... by mukka123 New Member in Other Usage 06-08-2023 0 3	0	3
How to change the "FROM" address when alert emails are sent? As of now when email alerts are sent, the from address is the hostname of server sending the alert. Is it possible to... by adityapavan18 Contributor in Alerting 06-06-2023 2 4	2	4
How to schedule cron job for base report to run every 5 minutes outside specific hours? Hi, I have a dashboard that runs off the back of a report that is scheduled to run every minute.I need to amend the r... by tomapatan Contributor in Other Usage 06-05-2023 0 6	0	6
How to left join Two Splunk queries to get result? I have 2 splunk queries: Query1: gives resultAccountUserconsumed CountA1U12A1U21 Query2: gives resultAc... by sshubh Explorer in Other Usage 06-05-2023 0 13	0	13
Splunk Webhook Script - Setting up Microsoft Teams Alert? Hi There, I am attempting to set up alerts to send a message to a teams channel. However, I can't seem to find a way ... by jamie1 Communicator in Other Usage 06-05-2023 0 1	0	1
Why can't I see the icon picture for alert action option? Hi, I can't see the icon picture for alert action option, already the "alert_action.conf" configured as below: [ema... by Abdullah Explorer in Alerting 06-02-2023 0 3	0	3
How to join multiple search result and show as a single table for reporting? Hi, First of all thanks for taking out time and answering doubts. I tried to join 2 search results and show as outpu... by sshubh Explorer in Other Usage 06-01-2023 0 2	0	2
How to rest API to get results of a scheduled report? Hello. I know there have been a few posts on this topic, but I've been messing with it most of the day and the other... by bhjohns Explorer in Other Usage 05-31-2023 0 5	0	5
How to retrieve result from a webb link? Hello. I have a link like: http://n12345.se:8888/p2pd/servlet. If you surf this link you get back to: Status: Running... by jappen68 Engager in Other Usage 05-30-2023 0 4	0	4
How to convert multiple individual json objects into a nested json object ? I want to convert some of the below individual json objects in the event into nested single json object like the seco... by damode1 Path Finder in Other Usage 05-28-2023 0 1	0	1