Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- About Doreluss
Doreluss
Loves-to-Learn Lots
Member since:
11-07-2022
10-18-2023
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 11-07-2022 |
Activity Feed
- Posted Re: Risk-Based Alerting & Enterprise Security on Splunk Tech Talks. 10-12-2023 01:44 PM
- Posted Re: Trellix/Epo on a windows server sending data to indexers or HF? on Getting Data In. 04-11-2023 02:37 PM
- Posted Is there a way to search for updated DAT and AMCORE files in Splunk ? on Splunk Enterprise Security. 01-04-2023 10:42 AM
- Posted Is there a way to get alerts when routers or switches go down on your network or any endpoint? on Splunk Enterprise Security. 01-03-2023 03:45 PM
- Posted SPLUNK ADD-On For Network Infrastructure is now end of life- Is there any other way to monitor network devices? on Splunk Enterprise Security. 01-03-2023 03:42 PM
- Posted McAfee ePo and Splunk "McAfee Add-on on All Apps and Add-ons. 11-15-2022 03:05 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-12-2023
01:44 PM
@melissap In Splunk, you can create reoccurring notable events and turn them into informational events by configuring notable event settings and using Splunk's alerting and workflow features. Notable events are events that are identified as significant or noteworthy based on predefined criteria, and you can configure them to be informational for monitoring purposes. Thats the question I have as of right due to having so much alerts pertaining to a particular alert , however Im going to review the links you provided earlier in this chat. If I have any questions I will reach out to you. Meanwhile, thanks for the information.
... View more
04-11-2023
02:37 PM
Good day - The Splunk Engineer recommended ePO as the HF
... View more
01-04-2023
10:42 AM
Is there a way to search for updated DAT and AMCORE files in Splunk ?
... View more
Labels
- Labels:
-
upgrade
01-03-2023
03:45 PM
Is there a way to get alerts when routers or switches go down on your network or any endpoint?
V/R
SD
... View more
Labels
- Labels:
-
using Enterprise Security
01-03-2023
03:42 PM
Good evening everyone.... Being that the Splunk ADD-ON for Infrastructure is now end of life is there any other way to monitor network devices
... View more
Labels
- Labels:
-
using Enterprise Security
11-15-2022
03:05 PM
I have a question when running the following question in search and reporting for the latest DAT version and AMCORE " index=* source type=mcafee:epo product="McAfee Endpoint Security", engine version>="6300.9594", dat version>="5051.0" I noticed the out put from Splunk doesn't marry up to the information in McAfee e-Policy. Is there a way to sync both McAfee e-Policy and Splunk , so that way when looking for AMCORE and DAT files they both display the same version. Is the McAfee Add-on for Splunk configured to show McAfee ENS data ?
... View more
Labels
- Labels:
-
configuration
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-18-2023
02:32 PM
|
