About Ephrem32

Ephrem32 · ‎12-04-2020

My apologies that was the typo. I checked the permission its on Global and has the admin roles selected which is correct. I still do not get REQ in my interested fields in my search. Any other reasons? Thanks @gcusello browser = BROWSER referrer = REFERRER req=REQ req_id=REQ_ID src=SRC

Ephrem32 · ‎12-03-2020

my field aliases are set like this: browser = BROWSER referrer = REFERRER req=REQ req_id=REQ=ID src=SRC During my search in the csv that includes these field aliases: I get all of the results in my field except req=REQ. I only get req but not REQ. Why is that and how would I be able to fix this? Thank you,

Ephrem32 · ‎11-04-2020

Hi, Thank you for your response, I am in the process of migrating from IPv4 to IPv6 on our servers and the servers are going to contain ipv6 addresses. Can you elaborate your steps regarding "use another UF with ipv6, let the UF send logs to the dev/test splunk, once these things are done, you will get comfortable with ipv6. Then you can deploy ipv6 for big/full environment" And also for question 2 and 3 can you point me to the exact part of the document that answers these question. And for question 4 which document are referring to? Thank you, @inventsekar

Ephrem32 · ‎11-04-2020

Please anyone can you help guide me to create a similar app like Splunk User Behavior Analytics. An reference or guides would help.

Ephrem32 · ‎11-04-2020

Please I need help on setting up my splunk to address the new ipv 6 address. Answers to these question who help me alot. 1.What changes need to be made to each server to use Ipv6? 2. What changes need to be made to the splunk deployment server? 3.What changes need to be made to each splunk deployment client.? 4. Are there system changes that need to happen by an admin to let splunk work ipv6? Thank you,

Ephrem32 · ‎11-03-2020

Hi Thank you for your response, I'm trying to do build an app similar to UBA and its campablities. I need guides on how to approach building an app and creating it to scan user behavior analytics on the security sector. An reference or guides would help. Thank you, @richgalloway

Ephrem32 · ‎11-03-2020

Hi, Thank you for your response, Yes I am in the process of migrating from IPv4 to IPv6 on our servers and the servers are going to contain ipv6 addresses. I need help making sure my splunk setup correctly for the migration to ipv6. Thank you, @richgalloway

Ephrem32 · ‎11-03-2020

Hi, I would like to build my own Splunk User behavior app. Can you guide me through the steps on building it by providing a references and other sites that can help me build it. Thank you,

Ephrem32 · ‎11-03-2020

Hi, I need help converting my splunk IPV4 to Ipv6. The questions have are: 1.What changes need to be made to each server to use Ipv6? 2. What changes need to be made to the splunk deployment server? 3.What changes need to be made to each splunk deployment client.? 4. Are there system changes that need to happen by an admin to let splunk work ipv6? I would greatly appreciate if each of these questions can be answered to help convert my splunk ipv4 to ipv6 step by step. Thank you,

Ephrem32 · ‎07-14-2020

I have a list of ip address that come from 1 source, I want a query to list the ip address separately and make them their own value so when I click on each ip address they are their own event etc. Thank you,

Posts	11
Solutions	0
Karma Given	1
Karma Received	1
Member Since	‎07-10-2020

Online Status	Offline
Date Last Visited	‎12-04-2020 12:05 PM

Field alaises

Splunk User behavior app build

Splunk IPv4 to IPv6 conversion

IP address separating from 1 source

Re: Field alaises

Field alaises

Re: Splunk IPv4 to IPv6 conversion

Re: Splunk User behavior app build

Re: Splunk IPv4 to IPv6 conversion

Re: Splunk User behavior app build

Re: Splunk IPv4 to IPv6 conversion

Splunk User behavior app build

Splunk IPv4 to IPv6 conversion

IP address separating from 1 source