About Mfmahdi

Mfmahdi · ‎03-04-2024

we are getting WAF log and the events are very big we need to drop some lines from the events that has no meaningful value not the whole event. @gcusello thank you in advance.

Mfmahdi · ‎11-13-2023

Dears, kindly, support to make paloalto app to work the logs are coming to environment but the app is not working as you can see in pictures thank you in advance

Mfmahdi · ‎08-20-2023

we do have access to all the logs, we have PowerShell , sysmon and linux ... we need to know is any user is uploading file through PowerShell or sysmon or any data source that usually the SOC can monitor. we need to create a dashboard that shows any files activity @ITWhisperer thank you in advance

Mfmahdi · ‎08-14-2023

I 'm not allowed to search any logs. but what we are looking for is a dashboard that show is any user is uploading files in our environment @ITWhisperer

Mfmahdi · ‎08-14-2023

we logs from linux and windows but most of our servers they are linux @ITWhisperer

Mfmahdi · ‎08-13-2023

How to create a dashboard to show the activities of the users specially uploading files. Kindly

Mfmahdi · ‎07-17-2023

It did not work my friend

Mfmahdi · ‎07-16-2023

It did not work my friend 😞

Mfmahdi · ‎07-16-2023

here is the attachment

Mfmahdi · ‎07-16-2023

Hi there Every time when I restart my indexers I'm getting what you see in the attachment and this goes for all my 12 indexers how this can be fixed and the fix should be done from manage node or for each indexer can any one help please thanks in advance

Mfmahdi · ‎04-11-2023

tanks a lot 🙂

Mfmahdi · ‎04-10-2023

Our Splunk environment is working specific vlan our management want to have to Splunk moved to out of band management or move some management servers of Splunk to different vlan and access the management servers through ssh by using out band management is this can be Done? Thank you in advance

Mfmahdi · ‎02-15-2023

Thanks you are a start. it worked

Mfmahdi · ‎02-14-2023

I need to upgrade IBM was add-on I'm getting No spec file as you can see from attached. any one can help how to solve it. Thank you in advance

Posts	14
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎02-14-2023

Online Status	Offline
Date Last Visited	3 weeks ago

How to drop specific lines from an event not the w...

How to make the Palo Alto App work

How to create a dashboard to show the use activity

Bad regex value

Is it possible to access Splunk from different Vla...

Upgrade IBM was ad-on I'm getting No spec file as ...

How to drop specific lines from an event not the w...

How to make the Palo Alto App work

Re: How to create a dashboard to show the use acti...

Re: How to create a dashboard to show the use acti...

Re: How to create a dashboard to show the use acti...

How to create a dashboard to show the use activity

Re: Bad regex value

Re: Bad regex value

Re: Bad regex value

Bad regex value

Re: Access Splunk from different Vlan

Is it possible to access Splunk from different Vla...

Re: Upgrade IBM was ad-on I'm getting No spec file...

Upgrade IBM was ad-on I'm getting No spec file as ...