Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About radparik
radparik
Engager
Member since:
05-19-2021
05-31-2022
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 05-19-2021 |
Activity Feed
- Posted Re: How can we parse data from different hosts and direct it to the indexers? on Getting Data In. 05-31-2022 06:28 AM
- Posted Re: How can we parse data from different hosts and direct it to the indexers? on Getting Data In. 05-31-2022 06:07 AM
- Posted How can we parse data from different hosts and direct it to the indexers? on Getting Data In. 05-26-2022 01:09 PM
- Posted Re: Help with Splunk alert to identify software removal/installation on Alerting. 05-26-2021 07:05 AM
- Posted Help with Splunk alert to identify application control violation on Alerting. 05-25-2021 09:13 AM
- Posted Help with Splunk alert to identify when windows is booted to safe mode on Alerting. 05-25-2021 09:04 AM
- Posted Help with Splunk alert to identify software removal/installation on Alerting. 05-25-2021 08:55 AM
- Posted Re: Tracking software install/removal on Getting Data In. 05-19-2021 08:38 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-31-2022
06:28 AM
Raw logs include the host name in the beginning - no metadata from the diode itself. Would that be enough to send to Indexers for parsing?
... View more
05-31-2022
06:07 AM
Hello, We have a diode between two Splunk environments (that is the design). Right now, the data flow is- HF->Diode->HF->IDX Unfortunately, the diode forwards data from all hosts into one file in raw format. Is there a way to parse data from that one file?
... View more
05-26-2022
01:09 PM
We are receiving data via a diode. However, event logs are from multiple hosts. How can we parse data from different hosts and direct it to the indexers?
... View more
Labels
05-25-2021
09:13 AM
Hello, I am trying to figure out how to have Splunk detect multiple application control violations on the system. Looking to have the alert trigger if there are more than 5 windows events from a single IP source. Does anyone know how I can go about this?
... View more
Labels
- Labels:
-
alert action
-
alert condition
05-25-2021
09:04 AM
Hello, I am trying to monitor if a machine was booted to safe mode. Essentially, if there are more than 5 services dependency failures from a single IP address - the alert should trigger. Does anyone know how I can go about this?
... View more
Labels
- Labels:
-
alert action
05-25-2021
08:55 AM
Hello, I am trying to figure out how to monitor for a successful removal/installation of a software in the environment (mainly MSI) using Splunk. Does anyone know how I can go about this?
... View more
Labels
- Labels:
-
alert condition
05-19-2021
08:38 AM
@tmontney how did you catch MSI installs? I am trying to create alerts to track MSI Installations and MSI Removals. Thanks!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-31-2022
01:13 PM
|
