Has anyone worked with ./splunk check-integrity and if yes do you know how to interpret the results? This link does not provide information on how to interpret the results - https://docs.splunk.com/Documentation/Splunk/9.2.1/Security/Dataintegritycontrol I was provided cursory information but it still does not tell me enough to know when a compromise may have occurred and where. Example ... View more

Does anyone know of a list of component codes and their meanings for at least _internal and _audit? I have asked instructors and Splunk direct with no help so far.  ... View more

Does anyone know the list of messages and what they mean when running ./splunk check-integrity -bucketPath [ bucket path ] [ -verbose ] I searched all of Splunk, opened a ticket, spoke to professional services with no luck. Here are some examples of the messages: Hash corresponding to slice... Slices hash file (l1Hashes... Hash of l1Hashes... Journal has no hashes Hash files missing in the bucket   ... View more