I destroyed some VMs in my production recently. But I can still them inthe page: "IT Essentials Work" => "InfrastructureOverview" => Unix/Linux Add-on. They have inactive status already but h...
Bonjour à tous
s’il vous plaît je suis un étudiant et c’est la première fois que j’utilise splunk
J’ai installé splunk enterprise sur mon windows 10
Je dois surveiller mon Active Directory (s...
We are seeing duplicate host for windows intheinfrastructureoverview. The issue is VMware VMs that have the same host name appear as well as windows host. Has anyone else ran into the...
...bsp;under theinfrastructureoverview tab there is an option to activate hiding empty entity types. By default it is off, is there a way to change this to on by default? See attached screen s...
...ollecting, investigating, monitoring, and sharing metrics from your technology infrastructure, security systems, and business applications in real time.
Metrics inthe Splunk platform uses a custom in...
...dex wineventlog (from the Splunk App for Windows Infrastructure). I came up with this query:
index=wineventlog earliest=-180d@d user!="*\$" user!="\$*" (EventCode=4720 OR EventCode=4725) | eval a...