About whitecat001

whitecat001

Am having issue with a Splunk alert triggering for daily snapshot of aws account ids. The alert is suppose to trigger when the account ids are less than 50 and missing some of the aws accounts. Is there a way to troubleshoot this issue to make sure all the account ids are complete to avoid the alert triggering

whitecat001 · ‎10-10-2024

Am having trouble getting a .json file into splunk through the backend to help support a customized dashboard. Is there a particular step i need to follow to get it in through the deployer?

whitecat001 · ‎10-04-2024

User receiving duplicated field names in splunk result for example when i run a search i get an output for the field1=Value1 and then when the user runs the same search he gets an output of field1 = "field1=value1" Does any one knows what i need to do to help the user get the same result as mine

whitecat001 · ‎08-07-2024

how can i troubleshoot when using a dashboard to export data, the data exported has numerous NULL values where there should be actual data in the table output in splunk

whitecat001 · ‎06-12-2024

How do i clone a dashboard and lookuptables from one App to another in Splunk

whitecat001 · ‎06-11-2024

pls can i get a query to set up an alert for when a scheduled job failed to run

whitecat001 · ‎05-28-2024

can i pls get another search that can show last logon date for active directory service account

whitecat001 · ‎05-28-2024

its not working

whitecat001 · ‎05-28-2024

thank you

whitecat001 · ‎05-28-2024

what command can i run if am not sure where an index for a data associated with a sourcetype is stored in splunk

whitecat001 · ‎05-24-2024

Can i get a Splunk query that shows the last logon date for a group of active directory service account Thanks

whitecat001 · ‎05-20-2024

pls can you elaborate

whitecat001 · ‎05-20-2024

Pls can i get a query that shows statistics on search activity in splunk

whitecat001 · ‎05-16-2024

Thanks for the response can i get a query that helps to show how much searches are been ran per indexes volume

whitecat001 · ‎05-16-2024

Pls what is the rest endpoint for searches that users are running

whitecat001 · ‎05-16-2024

I want a query that shows the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

whitecat001 · ‎05-16-2024

what indexes are used the most in splunk searches

whitecat001 · ‎05-16-2024

I want to know the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

whitecat001 · ‎05-16-2024

I want to know how much volume of index is used for splunk searches

whitecat001 · ‎05-16-2024

Can i get a query that will find searches that users are running in splunk

whitecat001 · ‎05-02-2024

pls whats the better way to create a search query for identifying knowledge object from inactive users and cleaning it up.

whitecat001 · ‎04-24-2024

I made my configuration for inputs.conf to ingest data into splunk but not getting data, during my investigation to check if there is any issue i realize the configured source is not showing any data and i cant see the source path in the index in splunk. Is there a reason why am not seeing the source after configuring the inputs.conf

whitecat001 · ‎04-04-2024

Hello Can i get a regex that matches with this; permission=Permission12345. I have tried to bring up one but its not working. Thanks in advance

whitecat001 · ‎04-01-2024

Thanks for the reply, thats what i thought but am not seeing any configuration in the app.conf file under the app folder. Do i need to add those config myself or find another way to go about it

whitecat001 · ‎04-01-2024

Hello I tried to change a Custom App name (e.g BRB_App to CAA_App) on the Deployer through the Cli but i realize that the name change only affects the Folder name not the name of the App when i checked the UI. Is there a way to effect that change to affect the Name of the custom App and not just the folder name

Posts	43
Solutions	0
Karma Given	2
Karma Received	2
Member Since	‎02-14-2024

Online Status	Offline
Date Last Visited	3 weeks ago

Splunk Alert

Getting a .json file into Splunk at the backend

User Getting double field name result

Troubleshooting

Knowledge object

Alert

Searches

Splunk Query

Search

Splunk Searches

Splunk Alert

Getting a .json file into Splunk at the backend

User Getting double field name result

Troubleshooting

Knowledge object

Alert

Re: Splunk Query

Re: Splunk Query

Re: Searches

Searches

Splunk Query

Re: Search

Search

Re: Splunk Searches

Splunk Searches

Data used by searches?

Re: Searches

Re: Searches

Re: Searches

Searches

How to find KOs owned by inactive users?

Indexed Data

REGEX

Re: Apps

Apps

Are you a member of the Splunk Community?