cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
machin90
Observer
Member since: ‎11-10-2020
‎11-26-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-10-2020
Activity Feed
Topics I've Started
View All

Re: RSS and alert

by in Alerting
‎11-26-2020 05:41 PM
‎11-26-2020 05:41 PM
Hi to4awa, Thanks for idea, this my query: index=main *Checkpoint* | stats count by publish,cve,link | table publish,cve,link,count | search NOT [inputcsv cve.csv | fields cve] | outputcsv append=t cve   My csv file is always fed so I have duplicates how to add only the missing cve ? ... View more

Re: RSS and alert

by in Alerting
‎11-25-2020 12:54 PM
‎11-25-2020 12:54 PM
Hi to4awa, Could you give me an example?   ... View more

RSS and alert

by in Alerting
‎11-24-2020 04:39 PM
‎11-24-2020 04:39 PM
Hi, I am subscribed to the NVD CVE rss feed that I receive via splunk. When one device matches I have an alert. The issue is that when the RSS feed is updated (with us every 24 hours) it also updates the date and time of the event and therefore gives me the same alert as yesterday. My alert check every day at 8.00 PM if new cve with my device. For example, I receive one alert yesterday for new cve checkpoint and today I have receive the same  alert with the same cve. index=main *Checkpoint* | table publish,cve,link Could you help me?   Thanks. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎11-26-2020 09:02 PM