cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
mjemi
Loves-to-Learn Everything
Member since: ‎02-12-2021
‎12-04-2023
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎02-12-2021
Activity Feed
View All

Drop XML event data via transforms.conf

by in Splunk Search
‎12-04-2023 01:23 AM
‎12-04-2023 01:23 AM
I need to drop EventCode 4634 and 4624 with Login_type 3, how i can use nullqueue option and write the correct REGEX on transforms.conf . ... View more
Labels

How to filter xml logs from wineventlog?

by in Splunk Search
‎05-12-2022 07:51 AM
‎05-12-2022 07:51 AM
I want to filter eventcode 4624 and user_type=computer using transforms and props.conf Transforms.conf [setnule] REGEX = \<EventID\>4624\<\/EventID\>.+\<Data\s+Name='WorkStationName'> DEST_KEY = queue FORMAT = nullQueue props.conf [XmlWinEventLog] TRANSFORMS-set=setnule ... View more
Labels

Re: Stop receiving from UDP port

by in Splunk Enterprise Security
‎02-12-2021 04:50 AM
‎02-12-2021 04:50 AM
Yes, it's on Linux, but the probleme the firewall is down on Linux ... View more

Stop receiving from UDP port

by in Splunk Enterprise Security
‎02-12-2021 12:09 AM
‎02-12-2021 12:09 AM
How i create a script to stop receiving data from UDP port on specific hours for  example betwenn 12h until 15h ? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎12-04-2023 03:18 PM