Splunk Enterprise Security

SplunkES - Find Job Issues


Here is a handy way to skim all the job results from - Rule and - Gen searches with ES to look for issues.

| rest splunk_server=local count=0 /servicesNS/-/-/search/jobs/
| where match(label,"Rule$|Gen$")
| table label, eai:acl.owner, eai:acl.app, isFailed, messages.warn, messages.fatal, messages.error
Labels (1)
Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...