About thielethomas

thielethomas · ‎07-13-2017

Hi@all, registry monitor is not the way to get this done. Try using scheduled Batch skript: reg query and pipe it to a Textfile , then monitor this file

thielethomas · ‎07-12-2017

Hi maciep, thanks for your hint !!! I had to add "list_deployment_client" & "list_deployment_server" in order to get my dashboard working.

thielethomas · ‎06-26-2017

Hi, which role rights are necessary for using the rest command (http://docs.splunk.com/Documentation/Splunk/6.6.1/SearchReference/Rest#Syntax) in splunk searches ? The search is just working with an admin account at the moment. When using power user account, I get: REST Processor: Failed to fetch REST endpoint uri=https://127.0.0.1:8089/services/deployment/server/clients?count=0 from server https://127.0.0.1:8089. Check that the URI path provided exists in the REST API. Unexpected status for to fetch REST endpoint uri=https://127.0.0.1:8089/services/deployment/server/clients?count=0 from server=https://127.0.0.1:8089 - Forbidden I already added all rest rights to poweruser role (rest_*).

Posts	3
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎03-02-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

rest command without admin account

Re: How can i use splunk to query windows registry

Re: rest command without admin account

rest command without admin account