I need an action for an incident responder to send a selected event's data via email. I can define notable actions, but they will be triggered automatically when a notable is created. How can I do this...
...insert a " character in a string, instead of just simply a " . I wanted to go through all the old records and simply replace the \" with a " . How would I go about doing this? It seems like I...
...rror.
This app is available for installation directly from Splunkbase. To install this app, use the App Browser page in Splunk Web.
My question is how can install a non-current version of an a...
...ny log being indexed by Splunk. I just want touse the Google Maps application to map them out. To take this one step further, I have the IPs (400+) in a spreadsheet. Any suggestions in howto "f...
Hello. i've been looking around a bit but it appears my google-fu isnt up to snuff for this problem. i'm wondering how one can parse non-pure xml logs. as in we have a ".txt" file that t...
Hi I need to update the Universal Forwarder credential package manually. Due to our configuration, I can't follow the steps out line here in this document. I unpacked the `.spl` file t...
...nd savedsearches/co-relation search for Use-case. Howto trigger notables to "Incident Review" dashboard manually?
The only piece I don't know is search to notables index insertion. If you guys k...