About lmmills

lmmills · ‎12-30-2024

We are using the Salesforce Add-On 4.8.0 and we have the username lookup enabled and it seems to be working properly except for the user type. It is setting all users to standard. Has anyone seen this or know how to fix it?

lmmills · ‎05-08-2023

When bringing in assets and identities to Splunk ES via an input is there any value in separating the lookups by domain? When I bring in the identities from multiple sources the events are multivalue so one event may contain 5 usernames and 5 different domains.

lmmills · ‎05-02-2023

The replace did work I just had to list every field. Thank you.

lmmills · ‎05-02-2023

We use Axonius to pull in identities. When creating the the search some of the values come in with the word "null". Is there a way to remove the word null and leave blank?

lmmills · ‎08-24-2022

I am new to Splunk so please forgive me for what I do not know. We are getting events with start=1661359208771 and need to covert it to a readable timestamp. I have tried changing the below Timestamp format and prefix with no luck. Any suggestions?

Posts	5
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎08-24-2022

Online Status	Offline
Date Last Visited	‎12-30-2024 05:34 PM

Salesforce Add-On lookup not setting the correct r...

When bringing in assets and identities to Splunk E...

Is there a way to replace values that say null wit...

How to configure Time Format from Epoch (13 digits...

Salesforce Add-On lookup not setting the correct r...

When bringing in assets and identities to Splunk E...

Re: Replace values that say null with nothing

Is there a way to replace values that say null wit...

How to configure Time Format from Epoch (13 digits...

Are you a member of the Splunk Community?