Splunk Dev

Virustotal Splunk Cloud error

sumanssah
Communicator

Getting error while performing below mentioned search

_ index=symantec sourcetype=sep12:risk NOT actual_action= "Details pending" dest_nt_host=* | table dest hash_value | vt field="hash_value"_

Search Factory: Unknown search command 'vt'.

0 Karma

sumanssah
Communicator

Check if you have required app installed on Splunk Cloud search-head, looks you are referring to

VirusTotal Malware Lookup for Splunk: https://splunkbase.splunk.com/app/4283

If not, raise a request for Splunk support for app installation.

0 Karma

Bloodnite
Path Finder

you likely need to set the commands.conf value to point to the app's python file, or you're not searching within the app

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...