About Mallikarjuna

Mallikarjuna · ‎10-11-2023

Hi caryc3, For MC Integration with existing SOAR instances, we do not have a release date. Please reach out to your account manager with any request.

Mallikarjuna · ‎09-08-2023

Hello, Below is a sample SPL that you can use for incidents that are already closed. |`mc_incidents` | search status_label="Closed" | spath input=sla path=sla_total_time output=sla_time | spath input=sla path=sla_units output=sla_units | eval sla_seconds =if (sla_units='h', 3600, if(sla_units='d', 86400, if(sla_units='m', 60, 60))) | eval sla_seconds=sla_seconds*sla_total_time | eval time_taken=update_time - mc_create_time | eval sla_status= if(time_taken > sla_seconds, "not met", "met") | table display_id, sla_status, assignee, status_label Let us know if you have any questions. Mallikarjuna

Mallikarjuna · ‎02-23-2023

probably posting url is not ok @Mike.

Mallikarjuna · ‎02-23-2023

Hi Mike, Apologies for inconvenience. This is a known issue for preview customers as we changed location of data storage. It is remedied in next rollout which is part of scheduling but currently paused. Will update you via email when this issue gets resolved. Thanks, Mallikarjuna

Mallikarjuna · ‎12-01-2022

Will interval = -1 also gets executed when below API is called http://host:8089/services/apps/local/_reload

Posts	6
Solutions	1
Karma Given	1
Karma Received	1
Member Since	‎07-22-2022

Online Status	Offline
Date Last Visited	‎10-11-2023 02:53 PM

Re: Integration with existing SOAR instance

Re: How to get SLA metrics data from Splunk Missio...

Re: Built-in SOAR instance- Do we have 100 actions...

Re: Mission Control: "Error: Data migration tasks ...

Re: Interval setting in inputs.conf