About whitecat001

whitecat001 · ‎10-10-2024

Am having trouble getting a .json file into splunk through the backend to help support a customized dashboard. Is there a particular step i need to follow to get it in through the deployer?

whitecat001 · ‎10-04-2024

User receiving duplicated field names in splunk result for example when i run a search i get an output for the field1=Value1 and then when the user runs the same search he gets an output of field1 = "field1=value1" Does any one knows what i need to do to help the user get the same result as mine

whitecat001 · ‎08-07-2024

how can i troubleshoot when using a dashboard to export data, the data exported has numerous NULL values where there should be actual data in the table output in splunk

whitecat001 · ‎06-12-2024

How do i clone a dashboard and lookuptables from one App to another in Splunk

whitecat001 · ‎06-11-2024

pls can i get a query to set up an alert for when a scheduled job failed to run

whitecat001 · ‎05-28-2024

can i pls get another search that can show last logon date for active directory service account

whitecat001 · ‎05-28-2024

its not working

whitecat001 · ‎05-28-2024

thank you

whitecat001 · ‎05-28-2024

what command can i run if am not sure where an index for a data associated with a sourcetype is stored in splunk

whitecat001 · ‎05-24-2024

Can i get a Splunk query that shows the last logon date for a group of active directory service account Thanks

whitecat001 · ‎05-20-2024

pls can you elaborate

whitecat001 · ‎05-20-2024

Pls can i get a query that shows statistics on search activity in splunk

whitecat001 · ‎05-16-2024

Thanks for the response can i get a query that helps to show how much searches are been ran per indexes volume

whitecat001 · ‎05-16-2024

Pls what is the rest endpoint for searches that users are running

whitecat001 · ‎05-16-2024

I want a query that shows the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

whitecat001 · ‎05-16-2024

what indexes are used the most in splunk searches

whitecat001 · ‎05-16-2024

I want to know the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

whitecat001 · ‎05-16-2024

I want to know how much volume of index is used for splunk searches

whitecat001 · ‎05-16-2024

Can i get a query that will find searches that users are running in splunk

whitecat001 · ‎05-02-2024

pls whats the better way to create a search query for identifying knowledge object from inactive users and cleaning it up.

whitecat001 · ‎04-24-2024

I made my configuration for inputs.conf to ingest data into splunk but not getting data, during my investigation to check if there is any issue i realize the configured source is not showing any data and i cant see the source path in the index in splunk. Is there a reason why am not seeing the source after configuring the inputs.conf

whitecat001 · ‎04-04-2024

Hello Can i get a regex that matches with this; permission=Permission12345. I have tried to bring up one but its not working. Thanks in advance

whitecat001 · ‎04-01-2024

Thanks for the reply, thats what i thought but am not seeing any configuration in the app.conf file under the app folder. Do i need to add those config myself or find another way to go about it

whitecat001 · ‎04-01-2024

Hello I tried to change a Custom App name (e.g BRB_App to CAA_App) on the Deployer through the Cli but i realize that the name change only affects the Folder name not the name of the App when i checked the UI. Is there a way to effect that change to affect the Name of the custom App and not just the folder name

whitecat001 · ‎03-25-2024

How do you copy a knowledge object from one app to another in Splunk

Posts	42
Solutions	0
Karma Given	2
Karma Received	2
Member Since	‎02-14-2024

Online Status	Offline
Date Last Visited	‎10-10-2024 11:13 AM

Getting a .json file into Splunk at the backend

User Getting double field name result

Troubleshooting

Knowledge object

Alert

Searches

Splunk Query

Search

Splunk Searches

Data used by searches?

Getting a .json file into Splunk at the backend

User Getting double field name result

Troubleshooting

Knowledge object

Alert

Re: Splunk Query

Re: Splunk Query

Re: Searches

Searches

Splunk Query

Re: Search

Search

Re: Splunk Searches

Splunk Searches

Data used by searches?

Re: Searches

Re: Searches

Re: Searches

Searches

How to find KOs owned by inactive users?

Indexed Data

REGEX

Re: Apps

Apps

Copy a Knowledge Object