About ranmys

ranmys · ‎06-03-2021

Hi, I'm facing the same error, did you manage to resolve the matter ?? Thanks

ranmys · ‎06-28-2020

Hello, after connecting AWS add-on and configuration, I have this query which is filling my index with much unwanted events : index=cloudtrail "userIdentity.sessionContext.sessionIssuer.userName"=PrismaCloudReadOnlyRole errorCode=success how can I prevent this username from indexing ? can I do it on the local .conf file ? Thanks

ranmys · ‎02-18-2020

Hello, I have a filename that i need to extract the date from : cvs.2020-02-10.3.log I understand that a modification is needed in the datetime.xml file... can someone help with CDATA tag and regex for that type of log name ? I have the time extracted correctly from with inside the log. Thanks Ran

ranmys · ‎02-18-2020

Thanks, Did the job 🙂

ranmys · ‎02-17-2020

Hello, I have this data which I want to extract to fields : 230.00 36.220 00000111 1 07 103442 07:15 06/01/20 95 ‰† 05 ˆ˜‹€˜™‰ 040000 0005326100352697670 00000001 00050001 6.350 0000000000000000000 2914908 2 00 411 1 I have unknown number of spaces at the beginning and unknown number of spaces in between fields... can someone help with the regex so I can extract the data in the props.conf file ? Thanks Ran

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎02-17-2020

Online Status	Offline
Date Last Visited	‎06-03-2021 02:50 PM

Prevent events from ingesting

datetime.xml addition

Regex Whitespaces delimiter

Re: 554, '5.2.0 STOREDRV.Submission.Exception:Send...

Prevent events from ingesting

datetime.xml addition

Re: Regex Whitespaces delimiter

Regex Whitespaces delimiter