Can any one help?
I am trying to configure a KVStorelookup, I have followed the online documentation:
https://docs.splunk.com/Documentation/Splunk/8.1.3/Knowledge/Configure...
Good day
Is it possible to configure MS AD objects to use kvstore for the lookup file instead of CSV ? We have a very large AD environment and lookups take up more space and time to sync with t...
...removed all existing file-based lookups.
changed searches in savedsearch.conf to populate KVStore instead of a traditional lookup.
I am able to configure & use KVStore without any issue....
I'm trying to configure an automatic lookup and match multivalue field of IP addresses (in the lookup) on an IP field (in the SPL results). The lookup is a KVStore, and the definition targets that c...
...ption to use a KVstore for assets & identities? Or a way to update them with a diff, rather than pushing the entire lookup? Is there a memory requirement for a certain number of assets &a...
Can't seem to get this lookup(KVstore) to function. The dataset is from active directory in some cases in the same event the user field isn't populated with the sam account data but rather with t...
...y_lookup.csv OR | inputlookup my_lookup
However, when my users attempts to run the search above, they get the following errors: -"The lookup table 'my_lookup.csv' requires a .csv or KVstorelookup d...
I recently re-installed MS Windows AD Objects app due to some issues. After the re-install, I tried the lookups build configuration wizard, but it doesn't seem to build lookups even though wizard r...
Hello Folks, How can i perform a CIDR/Subnet match with the "ip_intel" lookup file that comes by default ? This lookupKVstore dataset has CIDR ranges and single IP's listed under "IP" c...
...019-03-09 44
I need to either configure this lookup file or possibly a KVstore in order for me to be able to pull the app values in a search by a given hour period, day, week, month, year to d...