Updating lookup and dashboard through Splunk app upgrade

Splunk Cloud and Enterprise behave differently

Applying default-deny ACL in Splunk app

Isolate access between roles

Query LOCKOUT and PASSWORD_EXPIRED flags on Splunk SA-ldapsearch

userAccountControl vs. msDS-User-Account-Control-Computed

Configure Splunk Universal Forwarder to ingest JSON files

Parse single-line JSON into separate events

Malicious website detection on Splunk using malware-filter

A guide on using malware-filter lookups

Parsing NGINX log in Splunk

Configure regex in field extractor to create relevant fields