Hi, can anybody help, please?
Problem:
In dashboard I have label. If I write something in the label <number> and press Enter, I would like to make an action: write something in summary i...
...revious 2 or 4 weekday data stored in summary index. I'm using below as reference https://community.splunk.com/t5/Splunk-Enterprise/How-to-Build-Average-of-Last-4-Monday-Current-day-vs-Today-in-a...
Hello ,
I need to find which is the limit of user that can be online using SplunkEnterprise at the same time ; I have a search head cluster of 4 SH and 1 balancer
thanks
I am using SplunkEnterprise 6.6.2, and today I noticed an alarming problem.
In order for me to troubleshoot the problem, I created a bare-bone version of my dashboard:
<form>
<l...
..._PG="PERFORMANCE_GOAL_V2" | table _time, SFDC, CMN, CMID, CIP, SID, PUID, UID, MID, PID, C_PG,C_SPG, ACT There're 6 different metrics/panels in the dashboard to stats based on this query r...
We had an outage of 2 hours for all Enterprise Security Search Heads. During this period, we missed few notables to "Incident View" screen. Of-course when Splunk came back-up it started cron jobs f...
...EnterpriseSecuritySuite) from etc/shcluster/apps to etc/apps folder Ran the upgrade command – (/opt/splunk/bin/splunk install app ./splunk-enterprise-security_620.spl -update 1) Ran the essinstall command as per the i...
HI!
I'm following the following directions to try and set up assets and identities for SplunkEnterprise Security on Splunk Cloud through a heavy forwarder.
https://www.hurricanelabs.com/blog/g...
As I understand the splunk app for Enterprise Security creates a number of TSIDX namespaces that are used to store summary statistical data used by the dashboards and correlation searches t...