I installed the beta web intelligence app and I'm trying to load data and check it out. I've run the backfill scripts and I'm making headway... but I can't find thesavedsearch "Sourcenames Lookup"....
I tried to create a correlation search by selecting application context as "DA-ESS-AccessProtection", and I am getting a successfully saved message, but while I am checking with the content m...
...ai:acl.app matches what should show theSplunkApp that thesavedsearches come from.
I got 36 results and eai:acl.app had "search" for all 36 of them. They match thesavedsearches in thesearchApp....
...reate their own savedsearch exports, however, don't want them to see each other's export details.
So basically my problem is that if I give their Splunk users permissions to the Phantom appthen they c...
We are running two entirely separate Splunk Enterprise clusters in two AWS regions. We'd like to synchronize alerts and savedsearches and so on between these regions-- ideally, automatically, so t...
How do I resolve the following error? Error in 'SearchParser': Thesearch specifies a macro 'aws-cloudtrail-sourcetype' that cannot be found. Reasons include: the macro n...
I cannot save correlation searches through Splunk Enterprise Security in the context of any custom app. After going to the Content Management page in ES, I cannot open my correlation searches (it j...
I just upgraded from Splunk 5.0.4 to 6.2.1 and am getting the following error when I try to edit a savedsearch from App. This occurs on some, but not all savedsearches.
http 403 error : For...
Hello, I'm currently developing a Splunkapp and am having trouble bundling savedsearches to appear in theSearch & Reporting app. My intention is to include a list of searches in my app p...