Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About rayar
rayar
Contributor
Member since:
02-18-2020
02-26-2023
Community Statistics
| Posts | 170 |
| Solutions | 5 |
| Karma Given | 2 |
| Karma Received | 1 |
| Member Since | 02-18-2020 |
Activity Feed
- Posted Re: How I can configure start time in order to avoid duplicates? on All Apps and Add-ons. 02-26-2023 06:45 AM
- Posted Re: How I can configure start time in order to avoid duplicates? on All Apps and Add-ons. 02-22-2023 12:10 AM
- Posted How I can configure start time in order to avoid duplicates? on All Apps and Add-ons. 02-21-2023 08:13 AM
- Posted What is the reason for Splunk_TA_microsoft-cloudservices missing data? on All Apps and Add-ons. 02-01-2023 11:48 PM
- Posted Re: TA-MS-AAD data indexing delays- How is how_time set? on All Apps and Add-ons. 01-22-2023 01:22 AM
- Tagged Re: TA-MS-AAD data indexing delays- How is how_time set? on All Apps and Add-ons. 01-22-2023 01:22 AM
- Posted How is how_time set when experiencing TA-MS-AAD data indexing delays? on All Apps and Add-ons. 01-16-2023 01:27 AM
- Posted Splunk Add-on for AWS - Is it planned to release an option to use "AWS roles anywhere" for the integration? on All Apps and Add-ons. 12-26-2022 05:13 AM
- Posted Re: Create lookup without header on Getting Data In. 12-18-2022 02:34 AM
- Posted How to create lookup without header? on Getting Data In. 12-18-2022 02:28 AM
- Posted Re: Splunk Add-on for AWS - exclude specific event on All Apps and Add-ons. 11-22-2022 11:43 PM
- Posted Re: Splunk Add-on for AWS - exclude specific event on All Apps and Add-ons. 11-22-2022 11:02 PM
- Posted Re: Splunk Add-on for AWS - exclude specific event on All Apps and Add-ons. 11-17-2022 02:36 AM
- Posted Splunk Add-on for AWS: Is there any way to exclude a specific types of events from indexing? on All Apps and Add-ons. 11-17-2022 02:23 AM
- Posted Splunk Add-on for Microsoft Cloud Services to index Input type Azure Event Hub- what field can be used as unique key? on All Apps and Add-ons. 10-19-2022 04:00 AM
- Posted Re: Small CSV file indexing on Getting Data In. 09-14-2022 10:39 PM
- Posted Re: Small CSV file indexing on Getting Data In. 09-14-2022 01:27 AM
- Posted Re: Small CSV file indexing on Getting Data In. 09-13-2022 08:45 AM
- Posted Re: Small CSV file indexing on Getting Data In. 09-13-2022 08:35 AM
- Posted Re: Small CSV file indexing on Getting Data In. 09-13-2022 05:31 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
02-26-2023
06:45 AM
Hi Please advise how we can improve the performance the gap is now 36 hours
... View more
- Tags:
- azuread
02-22-2023
12:10 AM
thanks , it worked for me how I can improve the performance , I have a 24H gap now the HF is running this integration only [mscs_azure_event_hub://eventhub] account = splunk consumer_group = $Default event_hub_name = eventhub event_hub_namespace = eventhub.servicebus.windows.net index = amdocsazureadlogs interval = 30 max_batch_size = 2000 max_wait_time = 10 sourcetype = mscs:azure:eventhub use_amqp_over_websocket = 1 disabled = 0
... View more
02-21-2023
08:13 AM
We ran the EventHub integration on HF , after some time we want to move the App to another HF
How I can configure start time in order to avoid duplicates
[splunk@ilissplfwd11 local]$ cat inputs.conf [mscs_azure_event_hub://amdocsazureadlogs] account = splunk consumer_group = $Default event_hub_name = eventhub-name event_hub_namespace = eventhub-name.servicebus.windows.net index = amdocsazureadlogs interval = 15 max_batch_size = 3000 max_wait_time = 10 sourcetype = mscs:azure:eventhub use_amqp_over_websocket = 1 [splunk@ilissplfwd11 local]$
what will be the best configuration to handle a big amount of data (interval/max_batch_size etc)
... View more
Labels
- Labels:
-
configuration
02-01-2023
11:48 PM
we have integration with EventHub using Splunk_TA_microsoft-cloudservices
we see that events are missing
what might be the reason ?
in case the event reached the EventHub with delay , will the APP pull the data ?
how much time back the APP is scanning the data ?
... View more
Labels
- Labels:
-
configuration
01-22-2023
01:22 AM
02:05:19 2023-01-22 08:13:19 2023-01-22 06:08:00.000 azure:eventhub 02:05:41 2023-01-22 08:08:41 2023-01-22 06:03:00.000 azure:eventhub 02:05:41 2023-01-22 08:08:41 2023-01-22 06:03:00.000 azure:eventhub 02:05:51 2023-01-22 08:08:51 2023-01-22 06:03:00.000 azure:eventhub 02:05:51 2023-01-22 08:08:51 2023-01-22 06:03:00.000 azure:eventhub 02:06:09 2023-01-22 08:09:09 2023-01-22 06:03:00.000 azure:eventhub 02:06:09 2023-01-22 08:09:09 2023-01-22 06:03:00.000 azure:eventhub 02:06:39 2023-01-22 08:20:39 2023-01-22 06:14:00.000 azure:eventhub 02:07:08 2023-01-22 08:13:08 2023-01-22 06:06:00.000 azure:eventhub
... View more
- Tags:
- configuration
01-16-2023
01:27 AM
I have configuration for TA-MS-AAD and we see that we have delays
trying to understand how _time is set
... View more
Labels
- Labels:
-
configuration
12-26-2022
05:13 AM
Hi
Is it planned to release an option to use "AWS roles anywhere" for the integration ?
See link: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/introduction.html
... View more
Labels
- Labels:
-
configuration
12-18-2022
02:34 AM
How I can define that the lookup doesn't have a header and the first line is a value ?
... View more
12-18-2022
02:28 AM
Hi
I am going to create a DC list lookup daily using nslookup
how I can I define the lookup without a header or I should create a header manually ?
... View more
Labels
- Labels:
-
data
11-22-2022
11:43 PM
the question is how I mark // is part of the path I tried to \/\/ but it didn't work How to mark the specials characters
... View more
11-22-2022
11:02 PM
Thanks a lot , I was able to filter the data 1 more question , how I can define monitoring stanza for s3://aws-controltower-logs-272341124329 ..... I have tested with [source::.../aws-controltower-logs-272341124329*/.../*.json.gz] but I want to add s3://
... View more
11-17-2022
02:36 AM
we are on Splunk Enterprise on premise is there an option to exclude those events in Splunk Add-on for AWS also ?
... View more
11-17-2022
02:23 AM
We have the add on installed, is there any way to exclude a specific types of events from indexing ?
... View more
Labels
- Labels:
-
configuration
10-19-2022
04:00 AM
we are using Splunk Add-on for Microsoft Cloud Services to index Input type Azure Event Hub
what field can be used as unique key ?
... View more
Labels
- Labels:
-
other
09-14-2022
10:39 PM
I moved the monitoring to Linux UF and it resolved the issue thanks
... View more
09-13-2022
08:45 AM
C:\Users\issplunk>dir \\ntnet\filestore1\information_security$\ACSC_Websense_Large_Web_Traffic_Exclusion_List\*.csv Volume in drive \\ntnet\filestore1 is SCCM Content Volume Serial Number is 1EFA-6F4C Directory of \\ntnet\filestore1\information_security$\ACSC_Websense_Large_Web_Traffic_Exclusion_List 09/12/2022 04:01 PM 5,453 Websense_Lare_Web_Traffic_Exclusion_August_2022.csv 09/13/2022 03:23 PM 5,458 Websense_Lare_Web_Traffic_Exclusion_082022.csv 2 File(s) 10,911 bytes 0 Dir(s) 211,867,983,872 bytes free C:\Users\issplunk>
... View more
09-13-2022
08:35 AM
[monitor://\\ntnet\filestore1\information_security$\ACSC_Websense_Large_Web_Traffic_Exclusion_List\*.csv] disabled = 0 index = websense_large_web_traffic sourcetype = csv crcSalt = <SOURCE> initCrcLength = 512 still I see 0 in the heavy forwarder
... View more
09-13-2022
05:31 AM
just notices that if I add data manually from the HF itself the data is not indexed also what can be the reason ?
... View more
09-13-2022
05:14 AM
the data is not indexed to the index also I don't see any events in the internal indexes what can be the reason HF doesn't recognize filers ? I copied the same file to my local and was able to index manually
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-26-2023
10:21 AM
|
