Wow @ephemeric thanks for the help!! -.- ... View more

Did you resolve this? I'm having the same issue.   ... View more

Hi! Did you ever experience this message from clicking the "View results in Splunk" link included in the email? I was trying to edit the dispatch.ttl to make the search life a little bit large, but did not succeed.  I was wondering if the action.email.ttl is the one for this issue. Regards 🙂 ... View more

they are probably talking about this   https://www.sentinelone.com/partners/featured-partner-splunk , but it that resource and what it links to haven't answered my questions about getting the SentinelOne Splunk app working    ... View more

I'm having a similar problem. the SentinelOne recording when Kyle shows how easy it is to set up was missing something. because I the video he pretty much just drops the API token in there and  BAM! everything works.  I wish there was some setup documentation or guides that show you how to configure these integrations.  ... View more

Thanks @Dallastek1  Did you use just this app in Cloud or also another app (IA, TA add-ons) on Heavy Forwarder?   ... View more