cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
ravinder1k
Loves-to-Learn
Member since: ‎01-15-2020
‎07-23-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎01-15-2020
View All

Facing issue with TA-mailclient not able to get ma...

by in Getting Data In
‎06-09-2020 10:36 PM
‎06-09-2020 10:36 PM
@seunomosowon  Need help with this: I am using Splunk Enterprise Version:8.0.4  and TA-mailclient= 1.3.0   message from ""C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py"" ERRORinclude_headers New scheduled exec process: "C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py" Found external scheme definition for stanza="mail://" from spec file="C:\Program Files\Splunk\etc\apps\TA-mailclient\README\inputs.conf.spec" with parameters="protocol, mailserver, password, is_secure, mailbox_cleanup, include_headers" message from ""C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py"" ERRORinclude_headers message from ""C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py"" ERRORinclude_headers message from ""C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py"" ERRORinclude_headers New scheduled exec process: "C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py" Found external scheme definition for stanza="mail://" from spec file="C:\Program Files\Splunk\etc\apps\TA-mailclient\README\inputs.conf.spec" with parameters="protocol, mailserver, password, is_secure, mailbox_cleanup, include_headers" message from ""C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py"" ERRORinclude_headers New scheduled exec process: "C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py" Found external scheme definition for stanza="mail://" from spec file="C:\Program Files\Splunk\etc\apps\TA-mailclient\README\inputs.conf.spec" with parameters="protocol, mailserver, password, is_secure, mailbox_cleanup, include_headers" message from ""C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py"" ERRORinclude_headers New scheduled exec process: "C:\Program Files\Splunk\bin\Python2.exe" "C:\Program Files\Splunk\etc\apps\TA-mailclient\bin\mail.py" Found external scheme definition for stanza="mail://" from spec file="C:\Program Files\Splunk\etc\apps\TA-mailclient\README\inputs.conf.spec" with parameters="protocol, mailserver, password, is_secure, mailbox_cleanup, include_headers" group=conf, action=app_update, total_seconds=6.672, total_count=1, slowest_app=TA-mailclient, slowest_app_seconds=6.672, modinputs_seconds=6.000, modinputs_count=1, rest_endpoints_seconds=0.500, rest_endpoints_count=1, authorize_seconds=0.172, authorize_count=1, transforms_seconds=0.000, transforms_count=1, props_seconds=0.000, props_count=1 ... View more
Labels

Re: Field Extractions not working with Splunk_TA_s...

by in All Apps and Add-ons
‎01-23-2020 04:00 AM
‎01-23-2020 04:00 AM
Parsing done for [symantec:ep:risk:file] \,([^\,]+)\,IP Address:\s([^\,]+)\,Computer name:\s([^\,]+)\,Source:\s([^\,]+)\,Risk name:\s([^\,]+)\,Occurrences:([^\,]+)\,([^\,]+)\,\,Actual action:\s([^\,]+)\,Requested action:\s([^\,]+)\,Secondary action:\s([^\,]+)\,Event time:\s([^\,]+)\,Inserted:\s([^\,]+)\,End:\s([^\,]+)\,Last update time:\s([^\,]+)\,Domain:\s([^\,]+)\,Group:\s([^\,]+)\,Server:\s([^\,]+)\,User:\s([^\,]+)\,Source computer:([^\,]+)\,Source IP:([^\,]+)\,Disposition:\s([^\,]+)\,Download site:\s([^\,]+)\,Web domain:\s([^\,]+)\,Downloaded by:\s([^\,]+)\,Prevalence:\s([^\,]+)\,Confidence:\s([^\,]+)\,URL Tracking Status:\s([^\,]+)\,First Seen:\s([^\,]+)\,Sensitivity:([^\,]+)\,Permitted application reason:\s([^\,]+)\,Application hash:\s([^\,]+)\,Hash type:\s([^\,]+)\,Company name:\s([^\,]+)\,Application name:\s([^\,]+)\,Application version:\s([^\,]+)\,Application type:\s([^\,]+)\,File size (bytes):\s([^\,]+)\,Category set:\s([^\,]+)\,Category type:([^\,]+)\,Location:\s([^\,]+)\,Intensive Protection Level:\s([^\,]+)\,Certificate issuer:\s([^\,]+)\,Certificate signer:\s([^\,]+)\,Certificate thumbprint:\s([^\,]+)\,Signing timestamp:\s([^\,]+)\,Certificate serial number:\s([^\,]+) ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-23-2020 06:43 AM