This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About Manikandan_sam
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Manikandan_sam
05-26-2022
5Posts
0Likes
0Solutions
May 26, 2022Last Visited
User
Activity
User
Profile
Latest posts by Manikandan_sam
| Subject | Views | Posted |
|---|---|---|
| 792 | 05-02-2022 01:55 AM | |
| 862 | 04-30-2022 09:51 PM | |
| 1562 | 03-18-2022 05:08 AM | |
| 1627 | 03-15-2022 12:51 AM | |
| 1766 | 03-11-2022 05:15 PM |
User Badges
Community Statistics
| Member Since | 02-17-2022 01:41 AM |
| Date Last Visited | 05-26-2022 11:18 PM |
| Posts | 5 |
05-02-2022
01:55 AM
the preprocessing rule using drop means it as a drop specific endpoint or details to drop but how can i get a specific endpoint username incident that is only received in xsoar in the pre-process rule?
... View more
04-30-2022
09:51 PM
I successfully configured and integrated xdr into Xsoar but in xsoar incidents page it gets all common incidents from XDR but i need to get only my own endpoint user incident there is a filter option in the xdr incident to use and check your own end user, check the results, but what about xsoar? How can i do this? Should I change the classification and mapping to use a manual filter to use my own endpoint username filter in xsoar? or any other way to get my own endpoint incident in xosar?
... View more
03-18-2022
05:08 AM
thank for the replay I tried this query giving error search `notes` | expandtoken if i use this query search index="notes" it works correctly but not show any data my custom data is manually created (add data) uploaded csv file i also reset the time but i still don't get it yes content pack installed yes new system (synchronization with NTP) checked debug mode my custom data is from 3rd March and time also different but i uploaded it today and 2 days ago my raw file is showing in cli command but when i changed settings again it shows empty index how to change my timestamp and get data
... View more
03-15-2022
12:51 AM
yes this is my first time integrating splunk that sample log file is a data day (March 3) for testing so I loaded it into splunk add data and created a custom index example: that the log file data is only from March 3rd and how to use timestamp lookup and I already use that custom query in splunk config when i search xsoar cli !splunk-search query="index=notes" it shows index data and i can also parse the specific url and ip field in the playbook So is this the proper method to use Splunk custom index to get all the data into xsoar?
... View more
03-11-2022
05:15 PM
I am using splunk 60 day free trial non-enterprise edition and created a new custom index in splunk and manually added a sample event csv format file in the new index and all date is 2 days ago sample data splunk integration with xsoar does not generate any incident, is there a configuration and timestamp problem?
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks