Splunk Answers

Ask questions. Get answers. Find technical product solutions from passionate members of the Splunk community.

Category Activity

Windows Filtering Platform event logs - Username HiI'm currently working on obtaining Windows Filtering Platform event logs to identify the user responsible for runni... by CyberCyber New Member in Getting Data In yesterday 0 1	0	1
How to send user login fail alerts to specific users (who have 4625)? Hi there,I want to send email who have 4625 over 20 login fail count. I have search there is no problem about search ... by 10061987 Engager in Reporting yesterday 0 2	0	2
Option in Checkbox is ticked by default but panel in dashboard is still hidden whenever dashboard open I have a dashboard that show/hide panel whenever option/s in checkbox is ticked, which is already working. My problem... by jmmontejo Explorer in Dashboards & Visualizations yesterday 0 1	0	1
getting datasets Hello everyone, I'm working on a project ''Splunk Enterprise: An organization's go-to in detecting cyber threats'' p... by nina New Member in Getting Data In yesterday 0 1	0	1
how to make a bar graph showing quantity closed notable events based on last modified time in a time range of 12 hours? I would like a search query that would display a graph with the number of closed notables divided by urgency in the l... by grotti Engager in Splunk Enterprise Security yesterday 0 1	0	1
Is there an option to export CSV or PDF in Splunk Dashboard Studio? for the new Dashboard Studio, is there a way to add in the options to export CSV or PDF like in the old dashboard app... by sbattista Explorer in Dashboards & Visualizations yesterday 1 7	1	7
How to use stats with condition from multiple fields? Greetings, I am struggling with creating a table in splunk which would do the following transformation:Find the discr... by Utkc137 Engager in Splunk Search yesterday 0 11	0	11
Setup page to change app's navigation I want to allow user to change/switch the nav bar by clicking a button on the setup page. What is the easiest way to ... by PavelP Motivator in Dashboards & Visualizations yesterday 0 4	0	4
How to send only not suppressed notable from Splunk to SOAR Hi,we are using Splunk ES with notable events and suppressions. For sake of completeness, we have alerts that produce... by drew19 Path Finder in Splunk Enterprise Security yesterday 0 1	0	1
Adding key indicator search to custom dashboard in Splunk Enterprise Security Hello,I'm trying to add new/existing key indicator searches to my dashboard in ES, but the edit toolbar does not have... by ThuLe Observer in Splunk Enterprise Security yesterday 0 1	0	1