Splunk Enterprise Security

Rest call to app/SplunkEnterpriseSecuritySuite/ess_notable_suppression_list to pull the details.

tonymorin
Explorer

app/SplunkEnterpriseSecuritySuite/ess_notable_suppression_list

I need to pull a report from the Notable Event Suppressions I am not sure how.

Label Description Start Time Expiration Time Status

Thanks in advance.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...