hi all, We are not able to add any other colleagues as collaborator for the invetsigations. Can someone please help me what role has to be added. ESS Analyst has below roles related to investigation already added. manage_all_investigations Thanks! SM ... View more

Hi all, We are using AWS App and the dashboard for EC2 Instances and in the Tags field where can select the key available we can pass the values available for that tag key. It works fine as long as the tag key is a single word without any spaces like below aws-description-resource( (aws_account_id="0456789514") , (region="*") , "ec2_instances") |search tags.Name="splunk" | stats count(id) as count by state | eventstats sum(count) as total | where state!="running" | nadefault count total | eval _total_name="instances", _total_field=total But we have some tag keys that has space like OS Type and it comes like below which doesn't work due to space. aws-description-resource( (aws_account_id="0456789514") , (region="*") , "ec2_instances") |search tags.OS Type="windows" | stats count(id) as count by state | eventstats sum(count) as total | where state!="running" | nadefault count total | eval _total_name="instances", _total_field=total Above search wont give any results as tags token becomes (tags.OS Type="windows") and it doesnt work due to space. Can someone help me how to resolve this? Thanks! SM ... View more

Hi all, Since the ITSI entities import in CSV through search-based results has a setting only for upsert or append. How to delete/remove itsi entities which we won't get/don't see in the search that we initially used to import? If someone has achieved it please let me know ho to do it. Example: Kubernetes cluster nodes imported as entities. But as you are aware that cluster nodes can scale up/down dynamically so we need to remove the entities(cluster nodes) that doesn't exist anymore. Thanks! ... View more

hi All, We are trying to create F5 Telemetry stats dahsboards in splunk similar to the default dashboards in Azure/Amazon as mentioned in the below document. https://clouddocs.f5.com/products/extensions/f5-telemetry-streaming/latest/setting-up-consumer.html#splunk I haven't seen any useful apps for F5 Telemtry in splunk base whihc can be used. Has anyone else able to create useful stats for F5 Telemetry in splunk. If so can you please help me creating the same. Thanks, Sree ... View more