Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About mikerennie
mikerennie
Explorer
Member since:
08-29-2022
08-14-2023
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 08-29-2022 |
Activity Feed
- Posted Incident Field Mapping with Add-on for Atlassian JIRA Service Desk on All Apps and Add-ons. 08-14-2023 12:42 PM
- Posted Re: Mission Control: "Error: Data migration tasks failed to execute." on Splunk Mission Control. 02-23-2023 01:18 PM
- Posted Mission Control: "Error: Data migration tasks failed to execute." on Splunk Mission Control. 02-23-2023 06:59 AM
- Posted Built-in SOAR instance- Do we have 100 actions per day? on Splunk Mission Control. 02-23-2023 06:58 AM
- Posted Re: Is there a filter or can I create one so that I can quickly see all Incidents owned by me? on Splunk Mission Control. 12-15-2022 10:09 AM
- Posted Re: Mission Control: Can you send Incidents to another ticketing system such as ServiceNow or Jira? on Splunk Mission Control. 12-15-2022 09:50 AM
- Posted Is there a filter or can I create one so that I can quickly see all Incidents owned by me? on Splunk Mission Control. 12-15-2022 08:46 AM
- Posted Mission Control: Can you send Incidents to another ticketing system such as ServiceNow or Jira? on Splunk Mission Control. 12-15-2022 08:45 AM
- Posted Re: Preview 2 & limited SOAR functions on Splunk Mission Control. 12-01-2022 07:01 AM
- Posted Re: Preview 2 & limited SOAR functions on Splunk Mission Control. 11-30-2022 08:42 AM
- Posted Are there limited SOAR functions in Preview 2 if you don't own SOAR? on Splunk Mission Control. 11-30-2022 08:05 AM
- Tagged Are there limited SOAR functions in Preview 2 if you don't own SOAR? on Splunk Mission Control. 11-30-2022 08:05 AM
- Posted Asset context and/or integration with asset management/CMDB- Is this something Mission Control can or is looking to do? on Splunk Mission Control. 09-13-2022 10:43 AM
- Tagged Asset context and/or integration with asset management/CMDB- Is this something Mission Control can or is looking to do? on Splunk Mission Control. 09-13-2022 10:43 AM
- Got Karma for Re: Incident Type and Response Task not auto assigned to Incident- Is this a bug or did I not configure correctly?. 09-08-2022 08:49 AM
- Posted Re: Incident Type and Response Task not auto assigned to Incident- Is this a bug or did I not configure correctly? on Splunk Mission Control. 09-07-2022 11:56 AM
- Posted Re: Incident Type and Response Task not auto assigned to Incident- Is this a bug or did I not configure correctly? on Splunk Mission Control. 09-06-2022 12:49 PM
- Posted Re: Incident Type and Response Task not auto assigned to Incident- Is this a bug or did I not configure correctly? on Splunk Mission Control. 09-06-2022 11:46 AM
- Posted Re: Incident Type and Response Task not auto assigned to Incident- Is this a bug or did I not configure correctly? on Splunk Mission Control. 09-06-2022 11:34 AM
- Posted Incident Type and Response Task not auto assigned to Incident- Is this a bug or did I not configure correctly? on Splunk Mission Control. 08-31-2022 08:34 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-14-2023
12:42 PM
Does the 'Add-on for Atlassian JIRA Service Desk alert action' (https://splunkbase.splunk.com/app/4958) allow you to "auto-map" the varied values coming from the SplunkES alert to specific fields in Jira? As an example, we would like to auto map/populate ${source_ip}$ to the 'Source IP' field in the Jira record. Thank you, Mike
... View more
Labels
- Labels:
-
configuration
02-23-2023
01:18 PM
Thanks Mallikarjuna!
... View more
02-23-2023
06:59 AM
Hi Team, Seeing this error when I go into the Mission Control App. Any ideas? Thanks, Mike
... View more
Labels
- Labels:
-
other
02-23-2023
06:58 AM
Hi team, I heard that MC went GA. Congratulations! So, now that this is GA, is this our perm SOAR instance and to confirm that we have 100 actions per day as part of using MC?
... View more
Labels
- Labels:
-
other
12-15-2022
10:09 AM
Got it, thanks Matt!
... View more
12-15-2022
09:50 AM
Thanks Matt! I plan on using Mission Control as our ticketing system solution, but having that integration may be a great transitional step.
... View more
12-15-2022
08:46 AM
Is there a filter or can I create one so that I can quickly see all Incidents owned by me?
... View more
Labels
- Labels:
-
other
12-15-2022
08:45 AM
Mission Control: Can you send Incidents to another ticketing system such as ServiceNow or Jira?
... View more
Labels
- Labels:
-
other
12-01-2022
07:01 AM
Just checking in to see if you got my email. I responded to the case notification. Thanks, Mike
... View more
11-30-2022
08:42 AM
Sending via email as I am having issues sharing it on the web form
... View more
11-30-2022
08:05 AM
Hi Team! I was under the impression (mistakenly most likely) that if we did not own Splunk SOAR (which we don't) that there would still be a limited amount of SOAR functionality available in Preview 2 (or will it be available with the final product?). When I go to Automation > Run Action, I don't seem to be able to run or enable any actions here. Thoughts?
... View more
- Tags:
- Mission Control
Labels
- Labels:
-
other
09-13-2022
10:43 AM
Hi MC team,
One of our current requirements for a Security Incident Management solution is to be able to provide quick context around an asset. One of the most time consuming tasks that an incident responder faces is to track down what the device being alerted on does, what its criticality is and who is the owner. The most effective way to do this is to integrate with an Asset Management /CMDB solution. Is this something that Mission Control can or is looking to do?
Thank you kindly,
Mike
... View more
- Tags:
- Mission Control
Labels
- Labels:
-
other
09-07-2022
11:56 AM
1 Karma
Thoughts on this original issue?
... View more
09-06-2022
12:49 PM
Sure! Between my two messages above, I created a new Incident Type called 'cyber threat intelligence' and created the value in the Incident Type Matching Macro box: I now go into the other Incident Types I have (including the Default one) and it too now has the same values as the above:
... View more
09-06-2022
11:46 AM
In addition, I see that when I create an Incident Type, it changes the 'Incident Type Matching Macro' box value of all the others to be the same as the new one I created.
... View more
09-06-2022
11:34 AM
Hey! Thank you for reaching out. I can view the incident type I created (csirt - threat_activity_detection) within Settings > Incident Types. Regarding the Incident Type Matching Macro, if I click on the link with the setting for the incident type I created ("Click here to check your macro in action"), I do get results. FYI, the value in that box is 'eval incident_type = case( severity == "medium", "CSIRT - Threat_Activity_Detection")'
... View more
08-31-2022
08:34 AM
One of our alerts, CSIRT - Threat_Activity_Detection, came in on 8/31 but did not auto assign the Incident Type that I created (csirt - threat_activity_detection) and therefore the Response Template I created (CSIRT – Threat Activity Detection) for that Incident did not get assigned. Is this a bug or did I not configure this properly?
... View more
Labels
- Labels:
-
other
