About whitecat001

whitecat001

thank you

whitecat001

what command can i run if am not sure where an index for a data associated with a sourcetype is stored in splunk

whitecat001

Can i get a Splunk query that shows the last logon date for a group of active directory service account Thanks

whitecat001

pls can you elaborate

whitecat001

Pls can i get a query that shows statistics on search activity in splunk

whitecat001

Thanks for the response can i get a query that helps to show how much searches are been ran per indexes volume

whitecat001

Pls what is the rest endpoint for searches that users are running

whitecat001

I want a query that shows the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

whitecat001

what indexes are used the most in splunk searches

whitecat001

I want to know the total volume of indexes used for splunk searches. Query on information that has to do with how much indexes are used based on splunk searches

whitecat001

I want to know how much volume of index is used for splunk searches

whitecat001

Can i get a query that will find searches that users are running in splunk

whitecat001

pls whats the better way to create a search query for identifying knowledge object from inactive users and cleaning it up.

whitecat001 · ‎04-24-2024

I made my configuration for inputs.conf to ingest data into splunk but not getting data, during my investigation to check if there is any issue i realize the configured source is not showing any data and i cant see the source path in the index in splunk. Is there a reason why am not seeing the source after configuring the inputs.conf

whitecat001 · ‎04-04-2024

Hello Can i get a regex that matches with this; permission=Permission12345. I have tried to bring up one but its not working. Thanks in advance

whitecat001 · ‎04-01-2024

Thanks for the reply, thats what i thought but am not seeing any configuration in the app.conf file under the app folder. Do i need to add those config myself or find another way to go about it

whitecat001 · ‎04-01-2024

Hello I tried to change a Custom App name (e.g BRB_App to CAA_App) on the Deployer through the Cli but i realize that the name change only affects the Folder name not the name of the App when i checked the UI. Is there a way to effect that change to affect the Name of the custom App and not just the folder name

whitecat001 · ‎03-25-2024

How do you copy a knowledge object from one app to another in Splunk

whitecat001 · ‎03-23-2024

I want a sample query that will guide in creating one for both TA and Kvstore

whitecat001 · ‎03-22-2024

What i mean is i want to create a query to output kvstore error and splunk Ta errors

whitecat001 · ‎03-21-2024

Is there a way to create a Splunk query to show the errors from splunk TA and kv store.

whitecat001 · ‎03-20-2024

Is there a way to create a query to show the errors from splunk TA and kv store

whitecat001 · ‎03-20-2024

Thanks for the reply but will prefer checking through the cli, maybe like a command to achieve that

whitecat001 · ‎03-19-2024

1. Pls whats the best way to monitor kvstore? 2. What is the best way to monitor errors from kvstore migration

whitecat001 · ‎03-15-2024

Hello, There was a user name that was changed and want to transfer ownership of splunk knowledge Object (Alerts) to her new account name . I will like to achieve this through the cli and also the user changed her name and will want the new name to be applied to the knowledge object Pls how will i go about effecting this change.

Posts	35
Solutions	0
Karma Given	2
Karma Received	1
Member Since	‎02-14-2024

Online Status	Online
Date Last Visited	Friday

Searches

Splunk Query

Search

Splunk Searches

Data used by searches?

Searches

How to find KOs owned by inactive users?

Indexed Data

REGEX

Apps

Re: Searches

Searches

Splunk Query

Re: Search

Search

Re: Splunk Searches

Splunk Searches

Data used by searches?

Re: Searches

Re: Searches

Re: Searches

Searches

How to find KOs owned by inactive users?

Indexed Data

REGEX

Re: Apps

Apps

Copy a Knowledge Object

Re: Errors

Re: Errors

Errors

Query

Re: KVstore

KVstore

Knowledge Object