cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
defikes
Explorer
Member since: ‎12-01-2020
‎03-19-2021
Community Statistics
Posts 6
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎12-01-2020
Activity Feed
View All

Re: Using Transfroms.conf to drop parts of a file ...

by in Getting Data In
‎03-19-2021 06:20 AM
‎03-19-2021 06:20 AM
HI @defikes , In order to drop  events which are having  Process name you can use below props& transfroms. props.conf TRANSFORMS-dropevents = process_name transforms.conf [process_name] REGEX = \t\w:.*[\\](.*)\n       (test your regex before placing here) DEST_KEY = queue FORMAT = nullQueue ... View more

Re: Renaming Fields in Data

by SplunkTrust in Getting Data In
‎03-12-2021 06:09 AM
‎03-12-2021 06:09 AM
Hi @defikes, good for you! Ciao and happy splunking. Giuseppe P.S.: Karma Points are appreciated 😉 ... View more

Stealthwatch data into Splunk Cloud

by in Getting Data In
‎03-11-2021 10:20 AM
‎03-11-2021 10:20 AM
Good Afternoon, We are attempting to get our Stealthwatch data into Splunk. We are in Cloud 8.1 one so the only Add-on available is the Technology add-on for Cisco Stealthwatch from a 3rd party. Technology Add-on for Cisco Stealthwatch Data Exporter | Splunkbase   We have installed the Data Exporter on our Flow Collector and confirmed that Docker Container is working. Based on the Data Exporter documentation I installed a Get-Flows script that is pulling data but I am not sure it is pulling everything and the format is clunky.    I am curious if anyone has experience with getting Stealthwatch data into Splunk Cloud with this App and what is the best way to do it.  ... View more
Labels

Re: Palo Alto logs not showing in Splunk Cloud

by in All Apps and Add-ons
‎12-01-2020 01:36 PM
‎12-01-2020 01:36 PM
Thank you for the reply. I checked and all seems to be well with this. However, looking through the logs again I did see an error where it is Enqueing a very large log file (the one it is sending to the cloud) and has a large number of bytes to read, so that appears to be causing some issues as I think it may be getting backed up and not sending.    I checked and we have 2 parallel ingestion pipelines and our max throughput is 0.  ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎03-19-2021 11:54 AM
Karma given to
View All