About zschmerber

mf182407 · ‎02-27-2023

thanks for the details on this thread

zschmerber · ‎04-05-2022

that is crazy, can we make this a future request as it fundamentally changes getting data in?

zschmerber · ‎03-23-2022

did you ever get this figured out ?

zschmerber · ‎07-27-2021

I was able to fix this by reinstalling the app.

haward_tech · ‎07-20-2021

Can you Plz share installation files for UBA on Ubuntu? OR if you got OVA too?

zschmerber · ‎06-18-2019

I have the same problem Suricata 2.3.3: FIELDALIAS-suricata_global = proto AS transport src_ip AS src dest_ip AS dest The alias is not adding dest to the logs that are tagged with tag=attack OR tag=ids.

zschmerber · ‎03-10-2020

Found where to paste the string: https://docs.splunk.com/Documentation/ES/4.7.1/Install/ImportCustomApps#Import_add-ons_with_a_different_naming_convention

Posts	9
Solutions	0
Karma Given	2
Karma Received	1
Member Since	‎01-16-2019

Online Status	Offline
Date Last Visited	‎04-27-2022 10:28 AM

Microsoft Azure Add on for Splunk NO authenticatio...

Dose Splunk have a RHEL OVA Package for UEBA?

Re: How to ingest Event Hubs with Microsoft Cloud ...

Re: How do you delete a custom sourcytype in Splun...

Re: Why this error "mscs_azure_event_hub.py:_try_c...

Re: Microsoft Azure Add on for Splunk NO authentic...

Re: Dose Splunk have a RHEL OVA Package for UEBA?

Re: Data model not picking up field alias

Re: Why aren't Enterprise Security Webhooks and Pa...