About goji

livehybrid · ‎03-28-2025

Ah yes good spot @goji By editing in the config file directly you are bypassing the validation that is built-in that stops you saving it via the UI. At this point the Verify=true in the python code has no effect because its using http anyway 🙂 Thanks for letting me know.

goji · ‎06-08-2023

There are two selection "enable to risk index" and "enable to test index" from Content Management view, but these two option is dis-highlighted from default. It seems does not work properly. I think this function is that we can select each of correlation search, and then I can set to risk index but we can not do it them. Is it possible to select multiple correlation searches and enable the risk index all at once?

goji · ‎08-22-2022

Hi, @gcusello , Yes, I agree. I gonna certainly try to post to Splunk Idea as well since this is about ES functionality. Well, I don't know if I can do it, but I will try this one. Chao!!

goji · ‎08-10-2018

nittala_surya, This data was a bit old, so I could read it by increasing the value of MAX_DAYS_AGO. Thank you!!!

goji · ‎04-04-2017

Thank you somesoni2! This is perfect answer!!

goji · ‎02-01-2017

自己解決しました。 | eval a1=ltrim(link,"https?://") で、URLから、http://または、https://を削除します。そして、ドリルダウンパネルを利用して、 <drilldown> <condition field="a1"> <link>http://$click.value2|n$</link> </condition> <condition field="link"> <link>http://www.google.com/#q=$click.value2$</link> </condition> </drilldown> で渡すとa1をクリックすると実リンクに飛び、linkをクリックすると、workflowアクションのように、URLををGoogleの引数に渡し、検索結果を表示することができました。Dashboardサンプル集が参考になりました。httpでも、httpsでもいけます。以上でございます。

Posts	14
Solutions	1
Karma Given	1
Karma Received	3
Member Since	‎03-28-2016

Online Status	Offline
Date Last Visited	‎03-27-2025 10:42 PM

Why can't I download from OpenCTI Stream Feed into...

What is the "enable to risk index" and "enable to ...

Is it possible to enable correlated search in ES b...

How do I index one _time field from separated diff...

How to calculate min/max/avg/stdev by each line

外部リンクをクリックし、外部リンクに直接ジャンプすることは可能でしょうか？

Re: Why can't I download from OpenCTI Stream Feed ...

What is the "enable to risk index" and "enable to ...

Re: Is it possible to enable correlated search in ...

Re: How do I index one _time field from separated ...

Re: How to calculate min/max/avg/stdev by each lin...

Re: 外部リンクをクリックし、外部リンクに直接ジャンプすることは可能でしょうか？

Join the Conversation