cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
sconnors
Engager
Member since: ‎10-11-2011
‎02-16-2021
Community Statistics
Posts 5
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎10-11-2011
Activity Feed
Topics I've Started
View All

Re: Why MS Windows AD Objects failed to build look...

by in All Apps and Add-ons
‎02-12-2021 07:18 AM
‎02-12-2021 07:18 AM
Understood. The second point I was making was the setting of macro definitions in the previous screen. One screen back from the build screen is where macros are shown that require indexes. One of these is  ms__obj_win_events_index. Update this macro definition like so (assuming default index names):     index=WinEvtSec OR index=Windows Perhaps this will help. ... View more

Re: Why MS Windows AD Objects failed to build look...

by in All Apps and Add-ons
‎02-11-2021 02:20 PM
‎02-11-2021 02:20 PM
I ran into thet same problem. I use custom index names, and multiple indexes for various collection purposes, I listed the indexes thus within the macro searches:   index=first_winindex   index=second_winindex       etc This was incorrect. I need to use Boolean OR between indexes   index=first_winindex OR  index=second_winindex OR ...etc Now it builds the AD_Obj_Admin_Audit lookup. It does take a while to build however. Good luck! ... View more

Re: Segregation of incoming data

by in Getting Data In
‎04-11-2012 03:38 PM
‎04-11-2012 03:38 PM
Hi Ayn - Yep. Found that 10 minutes afterr the post. Thanks you all the same! ... View more

Re: Segregation of incoming data

by in Getting Data In
‎04-11-2012 12:20 PM
‎04-11-2012 12:20 PM
Exactly what I was looking for. It works perfectly. Thank You! You wouldn't know how to get this new index viewed by the Search App, you you? I am not an XML guy, so I'm hoping I don't have to write XML code for this. ... View more

Segregation of incoming data

by in Getting Data In
‎04-11-2012 07:34 AM
‎04-11-2012 07:34 AM
In our environment (mid-size enterprise with remote sites) we have our primary indexer on dedicated hardware. All data that is indexed is sent from forwarders distributed throughout the enterprise. On the indexer, I would like to segregate incoming data based on OS and site into separate databases. Something like incoming linux data from LA linux to the LAXLI db, incoming Windows data from Seattle to the SEAWIN db and so on. Has anyone done this or does anyone know how? Is it possible? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎02-16-2021 11:38 AM
Karma given to
View All