search

olafhartong / ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
MIT License
1.12k stars 175 forks source link

404 Error - when trying to edit the macro #84

Open sbvishnu opened 3 years ago

sbvishnu commented 3 years ago

We are getting a 404 error when we try to edit the macro to suit our organization needs as per your instructions in ‘Required actions after deployment' Section. (https://YOURSPLUNK/en-US/manager/ThreatHunting/admin/macros)

Can you help us on this?

image

sbvishnu commented 3 years ago

Any updates on this please?

twiitchy commented 2 years ago

I am having the same issue

MineshK commented 2 years ago

You should be able to edit your Macros in Splunk by going to: Settings > All configurations

This link should also take you there: https://yoursplunk/en-US/manager/ThreatHunting/admin/directory

From there, filter by App: ThreatHunting Look for Config type: Macro.

You can click any which you want to edit from there. I searched in browser for "index=" and identified the indexes which needed renaming.