About bobnieuwenhuis

bobnieuwenhuis · ‎05-10-2017

There is no easier way then just doing that |outputlookup Thanks!

bobnieuwenhuis · ‎10-05-2016

Create new certificate worked for me in 6.5.0. Thanks

bobnieuwenhuis · ‎02-18-2016

Guiseppe, You could use App for CEF https://splunkbase.splunk.com/app/1847/ We are using it to send data in CEF format to ArcSight, only downside to this is, you have to use a standalone searchhead, as you can't use it in a searchheadcluster. Hope this answers your question. Bob

Posts	3
Solutions	1
Karma Given	14
Karma Received	2
Member Since	‎12-02-2013

Online Status	Offline
Date Last Visited	‎09-23-2021 12:19 PM

Re: Can I delete all data from a KV store at once?

Re: After upgrading to Splunk 6.3.0, why am I gett...

Re: Is it possible to send logs in CEF format or r...