Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
11 results
Sorted by:
12-22-2017
08:30 AM
[UPD] The logs kinda different, so I changed my question.
Hi.
I need some ideas to create Windows Firewall Rules dashboard.
Right now it's looks:
Pane 1: List of Firewall Rules
4945 - A rule...
05-08-2019
03:09 PM
We are trying to pull the firewall configurations into the spunk, but when we use the palo alto app/add-on we are getting only the rules which are actively using from the palo alto syslogs.
We h...
06-07-2019
09:38 AM
Good morning
I am working on a Splunk dashboard where there's a site with 15 different firewall rules. I want to set up a single number that auto updates and shows that the rules are all active....
05-07-2018
11:10 PM
...s deployment client
* Added firewall rule to allow destination port 9997
* checked using "splunk list forward-server" to confirm server is listed in "active" section
On Splunk OVA enterprise s...
04-12-2022
01:09 PM
I have a threat activity rule that looks at both internal IPs attempting communication externally to malicious IPs based on Threat Intelligence lookups/feed and vice-versa. However I would like to t...
Labels
07-17-2020
09:53 AM
We have a prospective client interested in knowing what our reporting capabilities are, and I would like to pull a list of reports that Splunk ES already has pre-configured out of the box. We current...
Labels
07-22-2016
01:49 AM
...& FireWall-1|inzone=Internal|outzone=Internal|rule=1378|rule_uid={C56C9FDC-A90F-4527-870A-E8F851CFDDDE}|service_id=domain-udp|src=1.1.1.1|s_port=64101|dst=11.22.33.216|service=53|proto=udp|user=J...
05-31-2011
03:31 AM
Does Splunk ESS include, out of the box - functionalities that do not require any additional installation, correlation rules and alert for malware (worm, virus, ecc...) activities?
Thanks in a...
10-18-2011
11:54 AM
...bout making this possible?
For example, in the correlation search: "Network - SANS Block List Activity - Rule", I'd like to filter out any of this activity that gets blocked at the firewall, but s...
11-15-2017
08:31 AM
First of all, thanks @douglashurd for creating the app.
I had two questions regarding the app
Any chance to put samples directory within the app with different samples of eStreamer sourcetype...
