product
service
- Simple Security Consulting [Consulting]
- Splunk SOAR Automation Assessment Service [Consulting]
- Dashboard/SPL Creation Pack [Implementation/Building Support]
- Version upgrade service [implementation and construction support]
- Splunk Premium Apps construction support service [implementation and construction support]
- Splunk Security Log Analysis Start Package [Original App/Service]
- Splunk × CrowdStrike Falcon Insight, Macnica Original App [Original App/Service]
- Government uniform standard compatible App [Original App/Service]
- Smart Security Monitoring App [Original App/Service]
- Splunk × LANSCOPE Original App [Original App/Service]
- Security Monitoring App for Box [Original App/Service]
- Cloud Security Monitoring App [Original App/Service]
- SIEM Operation Monitoring Service [Original App/Service]
- List of services
- Macnica Premium Support for Splunk (utilization support, version upgrade monitoring)
- Macnica Premium Support for Splunk Skill Up Package
Specifications/Technical Information
Application for evaluation machine
- FAQ
Is it possible not to import data containing specific characters?
It is possible by the control on the index server side.
Settings are made in two configuration files, "props.conf" and "transforms.conf".
Below is a sample configuration.
----------------------------------------
■props.conf
[wmi]
TRANSFORMS-test=testnull
----------------------------------------
* Since wmi is a source type, it is necessary to set it according to the customer's environment.
----------------------------------------
■transforms.conf
[testnull]
REGEX=^EventCode=(592|593)
DEST_KEY=queue
FORMAT=nullQueue
----------------------------------------
After the above settings, restart the index server.
In charge of Macnica Splunk Co., Ltd.
- TEL:045-476-2010
- E-mail:splunk-sales@macnica.co.jp
Mon-Fri 8:45-17:30