...ay to tie the 2 together so I can assign a username to the proxy logs? Does a nightly report work best?
Proxy Fields: Time, IP Address, URL, Category
DHCP Log: Username, IP Address, Time IP a...
Hi,
We have a sql log where the format is not conducive to a predictable pattern for delimiting. Or so i think. In any case, i am interested in tying two lines together based on time stamp of t...
Is there a simple way to display _time on the panel title fields? I am tying to create a dashboard and there are no date/time values in the index query, so I want to reply on _time.
Thanks,
Philip
Hello, I have been making a ton of alerts to notify me on certain event IDs but this morning when I logged into my console I saw a huge red exclamation mark next to "Searches Skipped." I looked at t...
Hello everyone!
I'm tying to build a Dashboard from a db connected to splunk server thanks to dbconnect.
From my query, i don't get event, but only a table from my db.
I would like to c...
...rusted by everyone. I'm tying to configure HEC to use the same certificates, but I'm having no luck in doing so. I tried following all the guides/questions on this board for securing HEC using certs, b...
Hello,
I'm tying to add more apps to our Splunk Web GUI. Every time I click "Find More Apps" I get an error message saying "Splunk is unable to connect to the Internet to find more apps." We are r...
Hi, in anything else this would seem very simple but I seem to be flummoxed trying to do this in splunk. Probably not helped by having zero regex knowledge. I have a field that has values in the fo...
...plunk (that is still widely used by teams) that will be de-commissioned in the next few months (upon tying up loose ends with the cloud instance).
I am running version 6.6.3 on-prem. Rather than u...
...o include the date range.
I found a few other posts on here that asked something similar but most required tying it to a time picker, which I am not using. Most of the panels are populated by r...