Hello, I'm using Entreprise security glass tables to show IT security indicators. Is it possible to export ES glass tables to pdf format? Thanks ... View more

Hi, I'm deploying splunk stream with an independent forwarder and an external NFS share +(two indexers+search head splunk_stream app). The objective was to capture and reference http flow of a specific web application (for traceability purpose). due to that, the main concern will be the ability to download pcap files but only indexing small events (_time, src_ip, desti_ip, pcap-url). However, in my tests, i couldn't find any pcap-url or path fields in my http flow events (stream:http). How can i handle this? Best Regards ... View more

Hi, I have an XML file input with the following form: <data> <record> <field name="X" value="vX1"> <field name="Y" value="vY1"> </record> <record> <field name="X" value="vX2"> <field name="Y" value="vY2"> </record> </data> In order to extract fields, I want to split this input to one event per each record. to do this, I tried this in props.conf: [sourcetype_name] .. BREAK_ONLY_BEFORE= (\<record\>) SHOULD_LINEMERGE = true Unfortunately, it's not working for me. Any ideas, please! ... View more