Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About martaBenedetti
martaBenedetti
Path Finder
Member since:
04-30-2021
3 weeks ago
Community Statistics
| Posts | 50 |
| Solutions | 0 |
| Karma Given | 20 |
| Karma Received | 1 |
| Member Since | 04-30-2021 |
Activity Feed
- Karma Re: Error message in Enterprise Security for gcusello. 02-06-2024 06:26 AM
- Posted Re: How to filter out the EVENT_TYPE in sfdc:logfile using Splunk Add on for Salesforce? on All Apps and Add-ons. 11-07-2023 11:56 PM
- Posted Re: How to filter out the EVENT_TYPE in sfdc:logfile using Splunk Add on for Salesforce? on All Apps and Add-ons. 11-07-2023 07:40 AM
- Posted How to filter out the EVENT_TYPE in sfdc:logfile using Splunk Add on for Salesforce? on All Apps and Add-ons. 11-06-2023 01:54 AM
- Got Karma for Re: Which values I will have for srchJobsQuota and rtSrchJobsQuota. 10-27-2023 07:17 AM
- Posted Re: Which values I will have for srchJobsQuota and rtSrchJobsQuota on Splunk Search. 10-27-2023 07:16 AM
- Karma Re: Which values I will have for srchJobsQuota and rtSrchJobsQuota for richgalloway. 10-27-2023 07:16 AM
- Posted Which values I will have for srchJobsQuota and rtSrchJobsQuota on Splunk Search. 10-27-2023 06:57 AM
- Tagged Which values I will have for srchJobsQuota and rtSrchJobsQuota on Splunk Search. 10-27-2023 06:57 AM
- Karma Re: How to get time difference between consecutive events by sourcetype during 7 days for ITWhisperer. 08-01-2023 05:31 AM
- Posted How to get time difference between consecutive events by sourcetype during 7 days? on Splunk Search. 08-01-2023 02:41 AM
- Karma Re: Why am I unable to apply search head cluster bundle? for gcusello. 01-26-2023 01:25 AM
- Posted Why am I unable to apply search head cluster bundle? on Deployment Architecture. 01-24-2023 08:28 AM
- Posted Re: Splunk Add-on for Microsoft Cloud Services: NO Azure Audit logs. on All Apps and Add-ons. 10-25-2022 06:04 AM
- Karma Re: Add-On for Atlassian Jira Issue Alerts fails to create alert for guilmxm. 10-13-2022 08:25 AM
- Posted Filter AWS Cloudtrail AwsApiCall events? on Getting Data In. 10-13-2022 07:41 AM
- Tagged Filter AWS Cloudtrail AwsApiCall events? on Getting Data In. 10-13-2022 07:41 AM
- Karma Re: Error in 'dbxquery' command: External search command exited unexpectedly with non-zero error code 1. for rahmatn. 10-13-2022 06:59 AM
- Posted Re: Universal Forwarder aeq queue size on Getting Data In. 10-03-2022 12:11 AM
- Posted How do I edit Universal Forwarder aeq queue size? on Getting Data In. 09-29-2022 03:18 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-07-2023
11:56 PM
Yes, that could be. Anyway, thank you very much for the help @FelixLeh
... View more
10-27-2023
07:16 AM
1 Karma
Thank you very much @richgalloway !
... View more
08-28-2023
09:27 AM
We got the same error for all the members of the cluster. When it occurred, we had to restart Splunk on each member.
... View more
08-01-2023
02:52 AM
1 Karma
You could try using metasearch since you are only really dealing with meta-data Another possibility is to schedule a regular report to save this data to a summary index and use the summary index for your dashboard Or do both of these. The caveat to summary indexes, is that you might want to ensure that your reports are overlapping so that you don't miss an interval but also make the updates idempotent so you don't end up double counting.
... View more
10-25-2022
06:04 AM
Hi, I have the same issue: have you ever solved the problem? Thanks Marta
... View more
10-20-2022
07:42 AM
Any update on this topic? I also have set mine higher and the max_size_kb remains at 500.
... View more
10-18-2022
11:29 AM
We are having the same issue on Splunk Enterprise 9 and DB Connect 3.7.0. Is there another way to workaround this issue without changing the logging settings? Any ETA on a fix for the Splunk DB Connect app?
... View more
10-13-2022
07:41 AM
Does anybody know a good way to filter out AWS Cloudtrail events? I'd like to send to null queue events that contains eventType=AwsApiCall.
My input is configured as "Generic S3" (https://docs.splunk.com/Documentation/AddOns/released/AWS/S3)
This is what I have on my HF where the Splunk_TA_AWS is installed and configured:
transforms.conf
[eliminate-AwsApiCall]
REGEX = \"eventType\":\s+\"AwsApiCall\"
DEST_KEY = queue
FORMAT = nullQueue
props.conf:
[aws:cloudtrail]
TRANSFORMS-eliminate-AwsApiCall = eliminate-AwsApiCall
Doesn't seem to be filtering ... any thoughts?
Thanks
Marta
... View more
- Tags:
- aws
- cloudtrail
Labels
- Labels:
-
heavy forwarder
-
props.conf
-
transforms.conf
07-14-2022
05:51 AM
Hi @VatsalJagani , I've tried setting in the drill-down offset 120 instead of 2m, the search ends but runs in a wrong range: it is as if the offset is not anymore the $info_min_time$ but the time I click on drill down. Thanks anyway
... View more
07-05-2022
01:15 AM
Solved! Thank you very much!
... View more
05-25-2022
01:38 AM
Thank you! Worked for me!
... View more
05-18-2022
02:46 AM
Worked for me, thanks!
... View more
05-11-2022
07:25 AM
The source stanza was just a typo, I've corrected it 🙂 Thank you Marta
... View more
03-02-2022
06:01 AM
Thanks a lot somesoni2, now is working fine!
... View more
07-07-2021
12:25 AM
@ITWhisperer on HFW there is Splunk Enterprise 7.1.3. Thought you were thinking about something 🙂 Thanks anyway!!
... View more
07-03-2021
03:15 AM
1 Karma
@martaBenedetti Use this Addon instead: https://splunkbase.splunk.com/app/4958/
... View more
06-30-2021
08:26 AM
Glad to help you @martaBenedetti 🙂
... View more
06-17-2021
12:01 AM
Yeah, actually I complicated my self....though of the OR condition this morning 😄 Thanks anyway!
... View more
05-31-2021
08:14 AM
Thank you very much, that worked perfectly fine. I was able to reach the same result also using SEDCMD. Thank you again!
... View more
05-17-2021
08:46 AM
Hi, I've been using this: https://docs.forescout.com/bundle/app-for-splunk-3-0-htg/page/app-for-splunk-3-0-htg.Appendix-D-Compatibility-with-CIM-Data-Models.html
... View more
05-14-2021
03:46 AM
Yep! It has proxy configurations available in the app.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
3 weeks ago
|
Karma given to
