Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Gaikwad
Gaikwad
Explorer
Member since:
09-20-2022
10-27-2023
Community Statistics
| Posts | 12 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 09-20-2022 |
Activity Feed
- Posted Re: Splunk app for AWS security dashboard shows '0' data on Splunk Search. 10-26-2023 11:53 PM
- Posted Splunk app for AWS security dashboard shows '0' data on Splunk Search. 10-23-2023 12:23 AM
- Posted Re: Unable to find sourcetype="ms365:defender:incident:alerts"? on Splunk Enterprise Security. 10-12-2022 01:26 AM
- Posted Re: Unable to find sourcetype="ms365:defender:incident:alerts"? on Splunk Enterprise Security. 10-12-2022 12:11 AM
- Posted Re: Unable to find sourcetype="ms365:defender:incident:alerts"? on Splunk Enterprise Security. 10-10-2022 10:14 PM
- Posted Unable to find sourcetype="ms365:defender:incident:alerts"? on Splunk Enterprise Security. 10-10-2022 12:26 AM
- Posted Re: How to fix this Error in 'SearchParser': The search specifies a macro 'm365_default_index' that cannot be found. on Splunk Enterprise Security. 10-05-2022 09:54 PM
- Posted Re: How to fix this Error in 'SearchParser': The search specifies a macro 'm365_default_index' that cannot be found. on Splunk Enterprise Security. 10-03-2022 10:03 PM
- Posted How to fix this Error in 'SearchParser': The search specifies a macro 'm365_default_index' that cannot be found? on Splunk Enterprise Security. 09-30-2022 02:43 AM
- Got Karma for How do you search users who were not logged in the past 30 days in azure AD?. 09-28-2022 05:17 AM
- Posted How do you search users who were not logged in the past 30 days in azure AD? on Monitoring Splunk. 09-22-2022 01:09 AM
- Posted Re: I am able to search syslog data from Fortigate, but why do I get no results in the Fortinet FortiGate App for Splunk on All Apps and Add-ons. 09-20-2022 11:52 PM
- Posted In Splunk Fortinet FortiGate app - Wireless and System dashboards are not working? on Splunk Enterprise Security. 09-20-2022 11:33 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
10-26-2023
11:53 PM
@tej57 is this correct
... View more
10-23-2023
12:23 AM
Splunk app for AWS security dashboard shows '0' data, need help to fix this issue when I try to run/edit query shows error as below
... View more
Labels
- Labels:
-
other
10-12-2022
01:26 AM
Hello @GaetanVP I tried to search those logs index =* sourcetype="mscs:azure:eventhub" but no luck
... View more
10-12-2022
12:11 AM
@richgalloway thanks for your reply as I check in input is not setup for sourcetype="ms365:defender:incident:alerts"? can you please let me know, how can I setup input for this "ms365:defender:incident:alerts"
... View more
10-10-2022
10:14 PM
I'm trying to setup Microsoft 365 app for Splunk in that app ->Security-> defender -> Defender 365 overview dashboard. this dashboard is not working when I check the query it contains sourcetype="ms365:defender:incident:alerts" but same I'm unable to find it when I search for index = azure or index= main as I check add is already there, only concern is unable to find that sourcetype="ms365:defender:incident:alerts" so just want to know, if that source type is not there then is there a way available so we can configure that or any other solution is available ? thanks
... View more
10-10-2022
12:26 AM
Unable to find sourcetype="ms365:defender:incident:alerts" can u pls help
... View more
Labels
- Labels:
-
other
10-05-2022
09:54 PM
Hi @isoutamo Thanks for your reply. as I check both Microsoft 365 app and Add-on got updated already since the Microsoft 365 app dashboards are not working. there are few observations I would like to share 1. few dashboard query which contain `m365_default_index` sourcetype="o365:management:activity" are working fine and showing data. 2. dashboard query which contains `m365_default_index` sourcetype="o365:graph:api" , `m365_default_index` sourcetype="o365:service:healthIssue" OR `m365_default_index` sourcetype="o365:graph:api" are not showing any details. before update it was working fine. please note I'm checking this in Microsoft 365 app -> Executive overview
... View more
10-03-2022
10:03 PM
Hi as I check TA is already updated, but unable to fix this issue. how can we define m365_default_index
... View more
09-30-2022
02:43 AM
I'm getting this error after upgrading Microsoft 365 app in Splunk error - Error in 'SearchParser': The search specifies a macro 'm365_default_index' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission for the macro, or the macro has not been shared with this application. Click Settings, Advanced search, Search Macros to view macro information.
... View more
Labels
- Labels:
-
other
-
troubleshooting
09-22-2022
01:09 AM
1 Karma
Hi,
I am trying to search for a list of users who have not logged into the azure ad past 30 days Can you please help
... View more
Labels
- Labels:
-
other
09-20-2022
11:52 PM
Hi just make sure all logs are forwarded properly and check below video for configuration it will defiantly help u https://www.youtube.com/watch?v=ToAuSf_DXL4
... View more
09-20-2022
11:33 PM
In the Splunk Fortinet FortiGate app - wireless and System dashboards are not working both dashboards are not showing any data, as I check from Fortinet app all logs are forwarded and other Splunk Fortinet dashboards like (Fortinet n\w security, traffic, unified Threat management,vpn ) work perfectly. please help.
... View more
Labels
- Labels:
-
configuration
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-27-2023
06:55 AM
|
