×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
tibi
Observer
Member since: ‎06-09-2021
‎06-11-2021
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-09-2021
View All

Re: Correlation searches scheduling to overcome do...

by in Splunk Enterprise Security
‎06-10-2021 04:14 AM
‎06-10-2021 04:14 AM
thanks for the reply.   please can you provide an example how to configure the cs and how to exclude duplicates? ... View more

Correlation searches scheduling to overcome downti...

by in Splunk Enterprise Security
‎06-09-2021 01:10 AM
‎06-09-2021 01:10 AM
Hello,   Hello,   Any suggestions on how to configure the correlation search schedule in a way that will not be affected by a maintenance downtime ?    For example if you have a correlation search that is schedule to run every hour at minute 5 for the last hour . how can be configured to cover also the skipped run and to not miss alerts?   Thanks. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-11-2021 03:21 PM