About mpipaliya_splun

mpipaliya_splun · ‎12-05-2023

Starter content for the ask-question category for the upcoming app. CISOs currently have difficulty demonstrating the value of the organization’s security program to other executives as well as board members. Additionally, meaningful performance indicators do not exist to inform executive leadership and the board of the resilience of the organization’s security posture nor do indicators exist to provide focus on the "day-to-day" tasks that are a priority. Does Splunk have Security Metrics App covering Network, Endpoint, and Vulnerability focused dashboards? Mean time to Detect Mean time to Investigate Mean time to Respond Trend of the Mean time to detect/respond/investigate % of incidents detected within the organizations SLA's % of incidents investigated within the organizations SLA's % of incidents respond within the organizations SLA's Trend of # 5,6, and 7 ES Notables last 24 hrs Risk notables last 24 hrs Trend of 9 and 10 ES notables abandoned last 24 hours Risk notables abandoned last 24 hrs Trend of 12 and 13 #splunk_security_metrics

mpipaliya_splun · ‎09-29-2022

Lakshman, I just tried reproducing the issue but seems like the the freshly installed Public apps are treated differently compare to Private apps. — Steps followed: Splunk Web > Apps > Find More Apps > "utbox" Installed Upgrade Readiness App Scanned Apps — Also, latest utbox1.9.2 app is cloud-vetted and tested to be functional on Splunk Enterprise and Cloud 9.0.1 Let us know if you find a reason behind false-positive result. Meanwhile, we will try to reproduce this behavior from our end.

mpipaliya_splun · ‎10-25-2018

For users looking for getting Splunk data into Tableau, have a look at Splunk Tableau WDC solution as an alternative to ODBC! Documentation and Deployment Instructions can be found at https://github.com/splunk/splunk-tableau-wdc

mpipaliya_splun · ‎10-10-2018

@sudoritz I understand your concerns, ODBC seem to have some issues with newer version of splunk, which hopefully shall be fixed in next release. —— BUT the good news is that Splunk's FDSE team has developed Splunk Tableau WDC (web data connector). Splunk Tableau WDC is an alternative solution to get data from Splunk to Tableau ! You can read detailed documentation on it over Github: https://github.com/splunk/splunk-tableau-wdc Let us know if you have any further questions. Hope this helps answer your question!

mpipaliya_splun · ‎04-02-2018

There seem to be issue with date/time format. See if Date time Format: %a %b %e %H:%M:%S %Y for Wed Mar 7 20:11:45 2018 works. If given timestamp does not solve the issue, please share content of inputs.conf and props.conf to analyze further. For more details on date/time format in Splunk, you may refer to docs on Commontimeformatvariables:

Posts	5
Solutions	0
Karma Given	14
Karma Received	2
Member Since	‎03-01-2018

Online Status	Offline
Date Last Visited	‎01-29-2024 02:46 PM

Security Score Metrics

Security Score Metrics

Re: URL Toolbox

Re: Integrating Tableau to Splunk

Re: Tableau connection issue with Splunk ODBC 2.1....

Re: How to define the Datetime Format on Splunk DB...