olafhartong / ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
MIT License
1.13k stars 177 forks source link

Not Getting Logs #14

Closed jsecurity101 closed 5 years ago

jsecurity101 commented 5 years ago

I recently have done a clean build of Chris Long's Detection Lab, where your updated tool is implemented (used it before great tool, thank you for your work on it) I have attached a screenshot of the Dashboard and the macros.conf file. Thank you in advance! Dashboard: image Top of macro.conf: image

jsecurity101 commented 5 years ago

Hey @olafhartong I found the issue. It was an indexes issue. I will close the ticket.

hermitsy commented 4 years ago

Hey @olafhartong I found the issue. It was an indexes issue. I will close the ticket.

@jsecurity101 - Would you mind sharing your fix please?