×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
foresterd
Loves-to-Learn
Member since: ‎07-25-2013
‎11-09-2023
Community Statistics
Posts 10
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎07-25-2013
Activity Feed
View All

Splunk Add-on for Microsoft Security and Microsoft...

by in All Apps and Add-ons
‎11-09-2023 06:01 AM
‎11-09-2023 06:01 AM
I just want to pose a quick question about the Microsoft API URLs that are used in the add-on.  At what point will the add-on be updated to reflect the new URL changes?  I had a conversation with a Microsoft engineer, and he mentioned that the following URLs may not work past Dec 31 2024:    API_ADVANCED_HUNTING = "/api/advancedhunting/run" API_ALERTS = "/api/alerts" API_INCIDENTS = "/api/incidents This link shows the difference between some of the old vs new urls :  Use the Microsoft Graph security API - Microsoft Graph v1.0 | Microsoft Learn I know it's a while off.  However, it comes quick at times.  Just trying to understand the process so I can stay ahead of it.  Also, I have seen add-ons that have the option for legacy inputs and also for current.  It would be great to have an option like that before the URL switch for this add-on. ... View more

Re: Does anyone know what the following events mea...

by in Knowledge Management
‎07-09-2020 01:59 PM
‎07-09-2020 01:59 PM
As of now we have not had to repeat the process;  I think the problem existed for a very long time before we detected it.  Latest from Splunk Support is a patch will be in a 7.3.x version for this issue. ... View more

Re: maxVolumeDataSizeMB Setting Precedence

by Splunk Employee in Getting Data In
‎06-12-2020 12:11 PM
‎06-12-2020 12:11 PM
"For the two indexes.conf volume settings below - would one take precedence over the other if they use the same path?"   I would recommend not use the same paths for volumes, and not to include one path into another. (and not include indexes paths into other indexes, or mix in the same folders volumes paths and non volume paths..) Otherwise, the splunk measure of the disk used size will be all incorrect, and you may experience data frozen faster. And you probably should see warnings in splunkd.log when you start the indexers, about risks on the paths conflicts. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎11-09-2023 10:57 AM