About merzinger_prude

merzinger_prude · ‎05-11-2021

I have installed the Akamai SIEM Integration Add-On (4310) on our Splunk Cloud IDM. When I go to Settings > Data Inputs, I see no input for Akamai to configure. What am I missing?

merzinger_prude · ‎04-23-2021

When I run that search it shows that the alerts haven't fired since early on of 4/22. They have some KV Store and other issues with this search head cluster so I am going to reform the cluster. Thanks for your help.

merzinger_prude · ‎08-10-2019

Thanks for your help. That worked

merzinger_prude · ‎08-05-2019

Thanks jawaharas, I am not able to view the image you posted.

merzinger_prude · ‎08-02-2019

Thanks for your reply. I see the file being downloaded daily to$SPLUNK_BASE/etc/apps/SA-ThreatIntelligence/local/data/threat_intel/phishtank.csv, however the "threat_group_intel" lookup is empty. Could this be a parsing issue? What should the settings be for Parsing Options under Data Inputs>Intelligence Downloads>phishtank?

merzinger_prude · ‎08-01-2019

I am trying to enable the out of box PhishTank Threat Intelligence in ES. The file downloads correctly but it doesn't write to any KV store collection. From my understanding, it should write to one of the *_intel KV stores. What else do I need to configure?

merzinger_prude · ‎02-22-2019

I have a Splunk dashboard that displays an email address as one field. The client would like to be able to click on the email address and then launch an Outlook email form with the email and subject line populated. The user would be able to further edit the email before they initiate the send. Is this possible to do from a Splunk dashboard?

Posts	7
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎02-22-2019

Online Status	Offline
Date Last Visited	‎05-11-2021 11:58 PM

Akamai SIEM Integration

PhishTank Threat Intelligence Not Writing to Colle...

Interface with Outlook from Dashboard

Akamai SIEM Integration

Re: Alerts Not Firing

Re: PhishTank Threat Intelligence Not Writing to C...

Re: PhishTank Threat Intelligence Not Writing to C...

Re: PhishTank Threat Intelligence Not Writing to C...

PhishTank Threat Intelligence Not Writing to Colle...

Interface with Outlook from Dashboard