Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About skathpal
skathpal
Explorer
Member since:
01-18-2015
06-05-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 01-18-2015 |
Activity Feed
- Got Karma for How to include Start Time and End Time in the message body of a scheduled email report?. 06-05-2020 12:47 AM
- Posted Re: Splunk ES APP Correlation Search Email Output Action on Splunk Enterprise Security. 02-26-2015 07:55 AM
- Posted Splunk ES APP Correlation Search Email Output Action on Splunk Enterprise Security. 02-25-2015 03:42 AM
- Tagged Splunk ES APP Correlation Search Email Output Action on Splunk Enterprise Security. 02-25-2015 03:42 AM
- Posted Re: Report Creation - Top 5 successful logins by user on Reporting. 02-25-2015 03:37 AM
- Posted Report Creation - Top 5 successful logins by user on Reporting. 02-25-2015 12:15 AM
- Tagged Report Creation - Top 5 successful logins by user on Reporting. 02-25-2015 12:15 AM
- Posted How to include Start Time and End Time in the message body of a scheduled email report? on Reporting. 02-21-2015 11:00 PM
- Tagged How to include Start Time and End Time in the message body of a scheduled email report? on Reporting. 02-21-2015 11:00 PM
- Tagged How to include Start Time and End Time in the message body of a scheduled email report? on Reporting. 02-21-2015 11:00 PM
- Tagged How to include Start Time and End Time in the message body of a scheduled email report? on Reporting. 02-21-2015 11:00 PM
- Tagged How to include Start Time and End Time in the message body of a scheduled email report? on Reporting. 02-21-2015 11:00 PM
- Posted Re: How to add custom logo in scheduled reports? on Reporting. 02-10-2015 04:26 AM
- Posted How to add custom logo in scheduled reports? on Reporting. 02-10-2015 03:05 AM
- Tagged How to add custom logo in scheduled reports? on Reporting. 02-10-2015 03:05 AM
- Tagged How to add custom logo in scheduled reports? on Reporting. 02-10-2015 03:05 AM
- Tagged How to add custom logo in scheduled reports? on Reporting. 02-10-2015 03:05 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
02-26-2015
07:55 AM
Help Required ?
... View more
02-25-2015
03:42 AM
Hello Everyone,
I need to setup the email output action for ES APP correlation Searches , I have found that we cant write the message body in Correlation Searches .
Kindly help , I need to write message body of each correlation searches so that we can see more useful information , Once we get the email of any alert .
Thanks in Advance
... View more
02-25-2015
03:37 AM
Thanks Mark
Above query return only one Column host , Actually I am looking for multiple columns of host from where got authenticated ,
Example
User host1 host2 host3
Tim 3 4 5
... View more
02-25-2015
12:15 AM
Dear Experts,
I was trying to create the report of the top 5 successful login by user.
Query
index="wineventlog" sourcetype="wineventlog:security" "eventcode=4624" OR "eventcode=528" | top 5 user
Run above Simple query
Got the results
User Count
a 10
b 9
Now I want to see the log source from where user - a got the 10 count. I found host is the field where we can see the log source.
I need to write the query so that I can see same result including the field host(Log Source)
User Log_Source1 Log_Source2 Log_Source3 Total Count
a 4 4 2 10
b 5 3 1 9
Hope my question is clear
Thanks in advance
... View more
- Tags:
- report
Hello Experts,
Need help to setup the output action of Reports where in message body I can see the start and end time of report data. Let say I scheduled the report every 3 Hours via email(Output Action). In Email message body we want to see the time of the report . Start time 3 Pm and End time 6 Pm so that system owner knows its 3 hours data from 3pm to 6 pm.
Sample
Message Body
Report Name: Top 10 External IP Denied
Report Start Time: Which field ??
Report End Time : ???
Description: Displays the top 10 foreign addresses that were denied inbound access by external firewall.
Hope my question is clear.
... View more
02-10-2015
04:26 AM
Thanks David But in answers state that for scheduled reports you can just remove the splunk logo. We want to add custom logo.
Have any one tested this. Thanks
... View more
02-10-2015
03:05 AM
Hi All,
We are looking to add our custom logo in reports.
Kindly guide for the same.
Thanks in advance
... View more
