Hey There! So we are running into something similar with ADFS logs not being CIM compliant. Can you explain to me what your reasoning was for formatting your search below? Also, is this specific to one log? How would I look at multiple logs with this search? Thanks, Jake ... View more

Hi - can you please paste the solution? The link is not resolving to the stanza. ... View more

Hi there - I've been asking this same question. You can reach out to govsupport@safenetat.com to get an article that shows how you get safenet data into splunk, but it doesn't show you how to configure that app. ... View more