Splunk: How to filter Source and Destination IP Addresses in firewall log [closed] - splunk

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 3 years ago.
Improve this question
Let say I have the following:
Source IP Addresses, 10.1.1.1 & 192.168.1.1
Destination IP Address 172.16.1.1
What is the right syntax to search for firewall log for this combination?
Is this the right syntax? I tried it but did not get the result. I've also tried different combination but didn't work too.
index=firewall src_ip=10.1.1.1 or src_ip=192.168.1.1 and
dest_ip=172.16.1.1

You were close. Use parens like in math and remember boolean operators must be in upper case. Try this:
index=firewall (src_ip=10.1.1.1 OR src_ip=192.168.1.1) AND dest_ip=172.16.1.1

Related

Configure email IDs in config in Splunk [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
Is there a way to configure the send to emails in a config file and call them in all Splunk alerts instead of defining emails in each and every alert?
If so, how?
Splunk believe alerts should be sent to those who need to see them, not necessarily the same people every time. Of course, that's not the case everywhere.
There is no config file just for alerts. Alert info is stored with the associated search in savedsearches.conf. You should be able to define settings common to all alerts in the [default] stanza of savedsearches.conf.

How do I remove a site that hasn't been activated? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I have a domain that needs to be removed. I set it up but never changed the settings at the registrar. The documentation says to use the Overview app, but I do not seem to have access. How do I do remove the site from my dashboard?
On the Overview page in the far bottom right there is a "Remove from Cloudflare" link. I believe this is here even when you have not verified your site.

Google indexed my website as an IP address [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I have a website : https://linuxquizapp.com.uy.
I recently used Google Search Console to index it into google but when I do a search, I get this instead:
That's the right IP but most importantly, how did the IP ended up there instead of the domain name and also, is there anything I can do to correct this?
The app is written in Go, and there is no Apache or Nginx or whatnot configuration I should change?
Note- I am including an image in the question instead of plain text or a link so this does not get "outdated" as Google indexer updates stuff.
You need to redirect the IP as host based requests to the domain host.
Once you will do that, google indexes will get updated in few days to show the hostname as domain instead of IP address.

CloudFlare: Cannot remove TXT record with the value "ca3-xxxxxxxx" [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I checked the DNS records on the digwebinterface.com/?hostnames=mydomain.com&type=TXT&ns=resolver&useresolver=8.8.4.4&nameservers=
The Dig shows two TXT records but but I don't have the first record: (ca3-0158c3e5584b4fdba369cf3efeb6c56a)
Dig shows:
mydomain.com#8.8.4.4 (Default):
mydomain.com. 299 IN TXT "ca3-0158c3e5584b4fdba369cf3efeb6c56a"
mydomain.com. 299 IN TXT "v=spf1 redirect=_spf.yandex.net"
This web site is on the CloudFlare. DNS records: http://prntscr.com/r2m9ln
What can be reason and how can I solve this issue?
the mentioned TXT record which starts with "ca3-" is a CloudFlare internal record which they use for TLS validation. I guess since they need it to make their services available to you, there is no chance to delete it.
There is several posts inside the CloudFlare community about it: https://community.cloudflare.com/t/unable-to-see-and-remove-txt-record/44179/5

Definition - Local area network configuration [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 7 years ago.
Improve this question
What is meant by a local area network configuration, as opposed to a local area network? or any network configuration for that matter.
What does it refer to exactly?
As it's name would imply, a LAN configuration refers to the parameters that defines the network, such as the network mask, security protocol in use, access control, IP (if a TCP/IP network) address delivery method, etc.
Btw this question is quite vague. If you're looking to know more about networks, you should start by some readings, and could possibly try out some online configuration exemple such as this one