About monawwer

monawwer · ‎09-01-2023

Do we have anything (i.e. Add-on or functionality) to check the code quality of our Splunk dashboards, reports and alerts ?

monawwer · ‎07-26-2022

MS Teams Alert Action add on is just sending first row from the output of Alert in MS teams. I have multiple rows in the output and want entire table to be sent to teams as an Alert. Please suggest how to configure that. Thanks in advance for your responses.

monawwer · ‎05-03-2020

No license warnings.

monawwer · ‎05-03-2020

Forwarder is running continuously

monawwer · ‎04-30-2020

Data is not flowing continuously from forwarder to indexer. Please suggest what are possible ways of troubleshooting.

monawwer · ‎06-26-2019

As i want to expand multivalue field at index time, Is there any other way ?

monawwer · ‎06-26-2019

Yes, I want to expand multivalue field on index time. For example: Object Color car black red Red is in color field. Output should be : Object Colour car black car red

monawwer · ‎06-26-2019

I am trying to put mvexpand in props.conf but i am not getting how to do .Is there any alternative ?

Posts	8
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎06-26-2019

Online Status	Offline
Date Last Visited	2 weeks ago

Splunk Dashboard - Quality check

Why is MS Teams Alert Action add on just sending f...

Data is not flowing

how to use mvexpand in props.conf