Splunk Enterprise Security
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Splunk CIM Validator: Issue Field validation error "no validation regex was found to evaluate"

dheerajdwiv
Engager
‎06-13-2018 03:26 PM

While validating the varonis logs using Splunk CIM Validator App, I am getting following error "no validation regex was found to evaluate" for " severity_id" field even though all the values are properly being extracted 100%. What steps are exactly needed to fix this error? Please help
alt text

Preview file
1 KB
0 Karma
Reply
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...