Splunk Dev

Virustotal Splunk Cloud error


Getting error while performing below mentioned search

_ index=symantec sourcetype=sep12:risk NOT actual_action= "Details pending" dest_nt_host=* | table dest hash_value | vt field="hash_value"_

Search Factory: Unknown search command 'vt'.

0 Karma


Check if you have required app installed on Splunk Cloud search-head, looks you are referring to

VirusTotal Malware Lookup for Splunk: https://splunkbase.splunk.com/app/4283

If not, raise a request for Splunk support for app installation.

0 Karma

Path Finder

you likely need to set the commands.conf value to point to the app's python file, or you're not searching within the app

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...