×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
terdave
New Member
Member since: ‎05-14-2019
‎06-05-2020
Community Statistics
Posts 1
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎05-14-2019
Activity Feed
Topics I've Started
No posts to display.
View All

Re: _audit index not auto extracting user field va...

by in Getting Data In
‎05-14-2019 07:55 AM
‎05-14-2019 07:55 AM
I fixed it by commenting out the line FIELDALIAS-user_for_splunk_endpoint_change = uid as user in the file /opt/splunk/etc/apps/Splunk_SA_CIM/default/props.conf ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM