Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About ksi_custr
ksi_custr
Explorer
Member since:
09-08-2015
06-22-2021
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 09-08-2015 |
Activity Feed
- Posted Does anyone know how to edit/create ITSI Entity Dashboard? on Dashboards & Visualizations. 06-21-2021 09:16 PM
- Tagged Does anyone know how to edit/create ITSI Entity Dashboard? on Dashboards & Visualizations. 06-21-2021 09:16 PM
- Tagged Does anyone know how to edit/create ITSI Entity Dashboard? on Dashboards & Visualizations. 06-21-2021 09:16 PM
- Tagged Does anyone know how to edit/create ITSI Entity Dashboard? on Dashboards & Visualizations. 06-21-2021 09:16 PM
- Karma Why am I getting "Error in 'summarize' command: This search does not support summarization" trying to use KV store lookup with Datamodel Acceleration? for pedromvieira. 06-05-2020 12:47 AM
- Karma Re: Splunk for MVM for tskinnerivsec. 06-05-2020 12:46 AM
- Posted Re: Splunk AWS data inputs on All Apps and Add-ons. 08-02-2017 07:20 PM
- Posted Re: Splunk AWS data inputs on All Apps and Add-ons. 07-28-2017 02:22 AM
- Posted Re: Splunk AWS data inputs on All Apps and Add-ons. 07-28-2017 01:58 AM
- Posted Splunk AWS data inputs on All Apps and Add-ons. 07-27-2017 07:20 PM
- Tagged Splunk AWS data inputs on All Apps and Add-ons. 07-27-2017 07:20 PM
- Tagged Splunk AWS data inputs on All Apps and Add-ons. 07-27-2017 07:20 PM
- Tagged Splunk AWS data inputs on All Apps and Add-ons. 07-27-2017 07:20 PM
- Posted Re: Why am I getting "Error in 'summarize' command: This search does not support summarization" trying to use KV store lookup with Datamodel Acceleration? on Splunk Search. 10-28-2015 09:22 PM
- Posted Splunk 6.3 New Search Results Setter on Dashboards & Visualizations. 10-09-2015 05:32 AM
- Tagged Splunk 6.3 New Search Results Setter on Dashboards & Visualizations. 10-09-2015 05:32 AM
- Tagged Splunk 6.3 New Search Results Setter on Dashboards & Visualizations. 10-09-2015 05:32 AM
- Tagged Splunk 6.3 New Search Results Setter on Dashboards & Visualizations. 10-09-2015 05:32 AM
- Posted Splunk Add-on for Check Point OPSEC LEA: Where are the libraries required for Debian? (pam.i686 and glibc.i686) on All Apps and Add-ons. 09-08-2015 07:51 AM
- Tagged Splunk Add-on for Check Point OPSEC LEA: Where are the libraries required for Debian? (pam.i686 and glibc.i686) on All Apps and Add-ons. 09-08-2015 07:51 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
06-21-2021
09:16 PM
Hello,
Does anyone knows how to edit or create new entity dashboard like the screenshot below?
ksi_custr_0-1624335009547.png
Also, I can add dashboard on the entity, but I can't add auto filter based on entity title or alias. When I put $host$ on the search, the dashboard wont load. See below screenshot.
ksi_custr_1-1624335237226.png
Thanks in advance.
... View more
08-02-2017
07:20 PM
Hi All, for all those whose looking answer for this.
Solved the issue by allowing certain rules on the security groups. the EC2 instance where the addon was installed should be able to access the internet.
Security group rules:
src: your_server
dest: 0.0.0.0/0
dest_port: 443
... View more
07-28-2017
02:22 AM
Hi Splunkers, Do I need to allow certain connections/ports on our firewall?
Thanks
... View more
07-28-2017
01:58 AM
solved the issue on name resolution. But I now get the timed out error when configuring input form CloudWatch Logs.
Any idea on this? Thanks.
... View more
07-27-2017
07:20 PM
Hi
I am trying to collect data from our AWS VPC. I have setup an EC2 instance on that VPC and the Splunk AWS app and addon were installed and configured. IAM role were attached on the said Ec2 instance and the right permission for all inputs were given. However, I am encountering the below error
Is there any configurations that I need to do. I did everything that is describe on the docs and on the below video.
https://www.youtube.com/watch?v=ZITShqH5z8M
Thanks,
... View more
10-28-2015
09:22 PM
Hi,
Is there anyone solved this issue?
Thanks
... View more
10-09-2015
05:32 AM
Hi All,
Has anybody tried to use the New Search Results setter in 6.3? I am trying to pass the search field results on a token however it is not working. Based on the splunk docs, just use $result.[fieldname]$. Below is my sample xml code.
<dashboard>
<label>Search Result Setter</label>
<description>Set tokens from the search manager to embed throughout the page.</description>
<row>
<panel>
<title>Test</title>
<table>
<title>First sourcetype ($first_sourcetype$)</title>
<search>
<query>index=_internal | top sourcetype</query>
<earliest>-60m</earliest>
<latest>now</latest>
<progress>
<set token="first_sourcetype">$result.sourcetype$</set>
</progress>
<cancelled>
<unset token="first_sourcetype"></unset>
</cancelled>
</search>
<option name="charting.chart">bar</option>
<option name="charting.legend.placement">none</option>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
</table>
</panel>
</row>
</dashboard>
Thanks,
... View more
09-08-2015
07:51 AM
Hi Splunkers,
I am trying to install and configure Splunk for Opsec LEA in Debian (Jessie) OS, however, I am unable to find the libraries required (pam.i686 and glibc.i686) in Debian. Can someone help me find those required libraries (or equivalent if there is)?
Thank you so much!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-22-2021
09:31 AM
|
