About Not_Greg

Not_Greg · ‎09-01-2023

at 7pm!

Not_Greg · ‎09-01-2023

Hey folks, I'm scheduling a meet up on 21 September! We'll meet at The Hoppy Monk on 1604 and 281 (North Central). Hope to see yall there

Not_Greg · ‎07-06-2022

Mad Pecker Brewing Company on TUESDAY at 7pm CST, July 12th! Everyone is welcome!

Not_Greg · ‎05-25-2022

Initial meetup went well find us at #san-antonio-user-group on splunk slack to communicate with us in a more real time way

Not_Greg · ‎05-23-2022

Yup, ill see you folks there!

Not_Greg · ‎05-17-2022

Oh Nerds, I didn't include a time, was going for 7pm or 1900 for the meeting

Not_Greg · ‎05-17-2022

Hey Folks, we're going to attempt an initial in person meetup on Tuesday next week (24 May). Anybody who is interested in attending is welcome. I dont think we will do a presentation on this initial, really the goal would be to get together to gauge what level of interest there is in the SA community, talk about what they want out of the group, and what it looks like going forward, meeting frequency, etc... I am shooting for a small bar / restaurant on the NW side, inside 1604: https://www.madpeckerbrewing.com/our-brewery/ We can revisit location choice if this ends up being too small.

Not_Greg · ‎05-17-2022

Thinking about starting somewhere informal, where folks who may be interested in attending can go and talk about what they want out of the group, and what it looks like going forward, meeting frequency, etc... Going to Suggest a place on the NW side, Inside 1604, on Tuesday. Open to other options though, Depending on where people live. https://www.madpeckerbrewing.com/

Not_Greg · ‎05-06-2022

Yea I think as of a few weeks ago they allowed in person stuff for meetups. Ill see about getting a place to meet somewhere.

Not_Greg · ‎04-04-2022

Once allowed, would like to meet somewhere to talk Splunk every 1 or two months

Not_Greg · ‎07-23-2020

If you want to check for values at some regular interval, recommend using the Timer App. We use it to schedule playbooks at a couple of intervals, based on label, similar to your own. This way your playbook can gracefully end. and pick up again when this new "Timer" container is made. You will need to use some custom code to pull up containers with this "NULL" or "NOTNULL" user or whatever. Definitely don't ever do sleep or keep playbooks open all the time that are checking for values that are or are not there. phanotm_mhike is right, it will DOS your instance!

Not_Greg · ‎07-23-2020

Our naming Convention: (Prod/Development/Depracated) - (Utility / Reporting / Enhancement) - (Active / null) - (Notable Name / Description) So PRD-UTL-Active-SplunkES Ack or DEV-RPT-Threat Malware Emailed to Users

Posts	12
Solutions	0
Karma Given	8
Karma Received	12
Member Since	‎07-23-2020

Online Status	Offline
Date Last Visited	‎09-19-2023 06:05 PM

21st September 2023 Meetup!

July 2022 Meetup Details!

Were on Splunk Slack!

Initial Meetup

Going to try to reconstitute this group

Re: 21st September 2023 Meetup!

21st September 2023 Meetup!

July 2022 Meetup Details!

Were on Splunk Slack!

Re: Initial Meetup

Re: Initial Meetup

Initial Meetup

Re: Going to try to reconstitute this group

Re: Going to try to reconstitute this group

Going to try to reconstitute this group

Re: How to create loop in Phantom playbook to chec...

Re: Recommendations for naming conventions and org...