cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
ewelch_splunk
Splunk Employee
Member since: ‎11-21-2017
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎11-21-2017
Activity Feed
View All

Re: escaping hyphen if any field has hyphen(-) as ...

by Splunk Employee in Splunk Search
‎12-11-2018 08:19 AM
‎12-11-2018 08:19 AM
My use case was a little different, I was trying to remove Account_Name = "-" from sourcetype = ActiveDirectory, and the where clause was the only method that I could find that produced the results I needed. Thanks! ... View more

Sophos Central 1.05 Are there different setup con...

by Splunk Employee in Deployment Architecture
‎11-21-2017 10:42 AM
‎11-21-2017 10:42 AM
We've configured Sophos Central v 1.05 on our dev server and everything works correctly. When we move the same configuration to our production distributed architecture, it fails. We see multiple errors "ERROR ExecProcessor - message from "phython /opt/splunk/etc/apps/sophos_central/bin/sophos_events.ph", and nothing ever hits the firewall. I've seen other questions posted about errors with sophos_events.py and we've verified that those are not our problem. Any Ideas? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma given to
View All