×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
JDown3
New Member
Member since: ‎07-20-2019
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎07-20-2019
Topics I've Started
No posts to display.
View All

Re: Event Forwarding Not Extracting Fields with Sa...

by in Splunk SOAR
‎07-21-2019 04:51 PM
‎07-21-2019 04:51 PM
Hi @4A616D6573, It is the same for me, trying to fix it, let me know if you do. Thanks. ... View more

Re: Event Forwarding Not Extracting Fields with Sa...

by in Splunk SOAR
‎07-20-2019 10:46 PM
‎07-20-2019 10:46 PM
In your alert/saved search, do you specify fields to output? (i.e. | fields username, src_ip) I had to do this for my alert to trigger and for the fields to show up in event forwarding > new saved search export, after clicking 'auto-extract fields'. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM