Other Using Splunk

Category Activity

How do I get slo breaches over period of time? Hello, I am trying to measure the downtime or slo breaches of certain customer endpoints over period of time, for exa... by msrama5 Explorer in Other Usage 03-24-2023 0 2	0	2
Location and visibility of home dashboard- Does it appear as home dashboard for everybody or just me? I created a dashboard in a custom app to display a report that's also in the app. I've made the report and dashboard ... by HarAtWork Explorer in Other Usage 03-24-2023 0 2	0	2
Cron expressions for alert scheduling every month of 1st and 3rd Monday? Hi team,Please help me out on Cron job.cron expressions for alert scheduling every month of 1st and 3rd MondayThanks ... by Anna1 Engager in Other Usage 03-23-2023 1 3	1	3
Splunk email alert for multiple host? I have table with _time, host and source Hostnames are different . I need email alert to be triggered separately f... by MG Engager in Alerting 03-23-2023 0 1	0	1
How to do alerts integration with netcool? We are trying to invoke alerts from Splunk to NetCool, and wondering what the right approach would be. We came up wit... by danielbb Motivator in Alerting 03-22-2023 0 3	0	3
How to check if the events count is greater than threshold in a specific timeframe? Requirement: I have a ton of events and I need to create an alert that keeps monitoring my job for the number of even... by Nidd Path Finder in Alerting 03-22-2023 0 1	0	1
Is it possible to close an alert based on an other search/alert? Hello there, To keep it simple, I am trying to figure out how to make an alert depend on other alert. Imagine trigger... by aatik5u Path Finder in Alerting 03-22-2023 0 0	0	0
How to create alert if no up alert received within 1 minutes? I have two types of events when the interface is down and when it is upIt usually happens that the interface comes do... by Raymundo Loves-to-Learn in Alerting 03-21-2023 0 1	0	1
Splunk Alert for host that has not had an specific event happen in 30 days? I'm trying to alert/query any Host that has not had an update in more than say 30 days. Here is the search in Splu... by wmbryan Explorer in Alerting 03-21-2023 0 6	0	6
Setting up a home lab A question about the architecture of the HomeLabHello,I am a Splunk Enterprise Certified Admin who has an opportunity... by yemerchandise Engager in Other Usage 03-21-2023 1 1	1	1
How to create new case - select entitlement? Have been able to raise cases previously but when trying to rasie a new case not seeing any drop down options under ... by SP344374 New Member in Alerting 03-21-2023 0 3	0	3
How to run a list of queries and generate a report Is there anyway to run a series of queries - anywhere from 10 to 60 - and have a report generated?I'm being discourag... by microserfs Explorer in Other Usage 03-21-2023 0 3	0	3
Is there anyway to get alert for new ERROR/exceptions? Hello, is there anyway to get an alert for the new errors/exceptions that never happened before? More like let say th... by See0 Path Finder in Alerting 03-21-2023 0 1	0	1
How to get current user from windows server (with username and count)? I'm using this code which gives me the information but I need current total users (index=* OR index=_) (index= O... by sam_kwon Explorer in Other Usage 03-20-2023 1 4	1	4
Splunk query for error code 405 which is appearring in Nginx access logs Hi team,I want to set email & slack alert when error code 405 will occur in NGINX access logs. Splunk should trigger ... by nikhilmfwd Path Finder in Alerting 03-16-2023 0 1	0	1
How can I show o365 email logs in a table? {"Organization": "groupxyz.onmicrosoft.com", "MessageId": "<12345678>", "Received": "2023-03-13T01:56:22.9207071", "S... by sulaimancds Engager in Alerting 03-16-2023 0 6	0	6
Missing --execute Argument in Custom Alert App I am working on a custom alert app to replace our old custom alert script action. It was working fine but all of sud... by secphilomath1 Explorer in Alerting 03-16-2023 0 3	0	3
Different view in email inline table and CSV attachement Hello. So I'm trying to create a report which will send a daily email.I'm using the action "Send Email" to send the r... by Pawel1 Engager in Other Usage 03-15-2023 0 2	0	2
Is there a way to set the job TTL to a different value for a saved search? Is there a way to set the job ttl to a different value for a saved search? by bohrasaurabh Communicator in Other Usage 03-14-2023 3 7	3	7
Why does job manager shows 0 events, but job link shows results? Hi, I have set up a scheduled report that runs every hour and writes the result set to a csv file. Activity->Jobs sh... by donutgalileo New Member in Other Usage 03-14-2023 0 3	0	3
Is there a folder path for splunk scheduling reports? Hello. I wonder if the path of the splunk scheduling report exists.If the path exists, can I edit the splunk scheduli... by taehe Explorer in Other Usage 03-13-2023 0 1	0	1
Search to filter email? index=mail \| dedup MessageTraceId \| dedup MessageId \| dedup subject \| lookup email_domain_whitelist domain AS Recipie... by sulaimancds Engager in Alerting 03-13-2023 0 16	0	16
How to resolve error: sendtophantom: Alert action script returned error code=1? Hi, We have recently switched from Phantom to SOAR and I'm trying to send our triggered alerts to SOAR. I have test... by freddy_Guo Path Finder in Alerting 03-08-2023 0 4	0	4
How to report grouping by user sorting by time for each user? Hi! i have a report for users login in from different countries in the last 24 hours: index="accesslogs" sourcetype=a... by dieguiariel Path Finder in Alerting 03-07-2023 0 4	0	4
How to include all search results in the email body of an alert? I used $result.fieldname$ but that only returns only one (the first) result of the search. Is there a way i can get a... by buttsurfer Path Finder in Other Usage 03-06-2023 0 1	0	1