Open maazbaig19 opened 1 month ago
Hello Did you checked the Audit Logs dashboard to find any error ? thank you
I see these errors
Unexpected error: invalid literal for int() with base 10: '_time'.
Hello Check your savedsearch configuration Did you configure the « timestamp » parameter to « _time »? If so and if you don’t have this field in your alert, it might cause an issue Just removing it will help to solve the issue keep me posted
Hello, Any update? Thank you
Request Type
Bug
Work Environment
prod
Problem Description
We have configured correlation searches on Splunk enterprise app to forward all the alerts to thehive but its not working. Status shows as failure. This is done thorough adaptive responses to create a new alert on thehive.
Steps to Reproduce
Possible Solutions
How to troubleshoot the issue? Is there any known issue with this?
Logs (issued from the search.log with logging mode set to DEBUG under Settings/Configuration)
-