I have an app that I built for a user group. There log on will be restricted by tags. I put the tags.conf file in there app so that I can edit it easily when needed. I ran the (http(s)://s...
In TA-meraki, there is a typo in tags.conf that prevents DHCP events from getting the dhcp tag.
[eventtype=meraki-dhcp]
network = enabled
session = enabled
dhcp = enable <-- should be d...
...how. Once I used the exact case, the tags worked fine. However this presents issues. I would like to make the tags.conf be case insensitive. Is there a way to accomplish this without adding multiple e...
I am beginning to work with tags and am having partial success. I have a tags.conf file that I dropped into the local directory of a new app I created. I then restarted and started to try to s...
We need to override a tags & eventtypes from one of the official TA (eg eventtype=ssh_authentication ).
eventtypes.conf have disabled=true at a stanza level, but tags.conf does NOT have s...
Can someone please explain the importance of Events.conf & Tags.conf Configuration in Splunk also we use SVN tortoise. better will be if someone can explain with use case ?
...estart Splunk to refresh new configuration including tags.conf, but we are trying to find ways to reload dynamically without restarting.
I also understand we have endpoints to support the addition/d...
I just updated my indexer to 4.1 this morning and found the following in the migration log:
Cannot automatically migrate pre 4.1
tags.conf : D:\Program
Files\Splunk\etc\apps\SKB-windows\d...
In the Palo Alto Networks Add-on for Splunk (Splunk_TA_paloalto) version 3.7.1, the pan_endpoint stanza is missing tags in the event types.conf file, and the pan_endpoint stanza is missing a...