I need to be able to list the changes made to firewall rules. It seems like a simple audit task that you should be able to do but unfortunately, I can't find the answer to my problem from these documentations.  Does anyone know how to do this audit from splunk?  Palo Alto Networks App for Splunk | Splunkbase Palo Alto Networks Add-on for Splunk | Splunkbase ... View more

Hello Splunk Community,  I have two search heads.  1 search head is able to send out email alerts and the other one can't. I am using Amazon SES as the Mail Host. Each Search Head has a unique Access Key and setup the secret key.  I can't figure out why 1 of the search heads can not send an email out and the other can.   I used the sendemail command on the server with the issue and this is the error message I am getting: command="sendemail", (535, b'Authentication Credentials Invalid') while sending mail to:<myEmailAdress> Thoughts?  ... View more