About mcayrol

ITWhisperer · ‎02-09-2024

Try adding supports_rawargs = true Other than that, do you have any documentation for the mitrepurplelab custom command that would indicate what values should be there?

isoutamo · ‎01-26-2021

Hi Currently splunk don't support this kind of chained alerting. There is request for that in ideas.splunk.com. Anyway you could try to create alert which write event to the new index (Add Actions -> Add to Triggered Alerts), then create second alert which is using that output from index etc.... r. Ismo

mcayrol · ‎10-06-2020

Ohhh indeed it's Inputlookup, I just saw the differents in the documentation, I run the search but since I have a lookup with 500 rows, the search in Job inspector is very huge and like you say, I see (NOT field3lookup ="randomrowfiled3lookup" OR NOT ...) But despite this, nothing changes compare at the result of a basic "index=XXXX" search I got the same numbers of rows.

mcayrol · ‎03-26-2019

Hello I got a problem, I recovered through a wifi scan application several wifi access point with their positions, the end result is a csv file that I imported on splunk, however when I make my request, it does not place me wifi access points according to their different location here are the fields of my csv This is my request source="wifiscan-export.csv" | geostats latfield=Latitude longfield=Longitude count by SSID The access points are all located in the same place instead of in their respective coordinates.

Posts	12
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎03-26-2019

Online Status	Offline
Date Last Visited	‎02-09-2024 04:18 PM

[Error] Pass token values from a dashboard as para...

How to create a trigger alert with condition that ...

Search with lookup and several fields to match

Create a map with satellite coordinates from a csv

Re: [Error] Pass token values from a dashboard as ...

Re: Trigger alert with condition that relies to an...

Re: Search with lookup and several fields to match

Create a map with satellite coordinates from a csv