Hello everybody, I would like to create a report in the form of a csv
file. The csv file should always contain a name and the date on which it
was created.Does anyone know how to create the current date in the file
name? Thanks for your help.Hidayat
Hello everybody,I hope you can help me out. I create a report to get a
list of countries. In the report, the same countries appear in two
different spellings, the German spelling and the English spelling. I
would like to summarise the values for the ...
Hello everybody, I hope you can help me out. I would like to find out
which and how many of the different applications are currently connected
to our SIEM and deliver log events. I would also like to receive the IP
addresses of the different applicat...
Hello, everybody, I hope you can help me out.I want to create a report
and search for a string in a special meta field (user.agent). The string
contains several special characters: %, /, \, ), $, =, (For example:user
agent contains 'Mozilla/5.0=(comp...
Hello everybody,I hope you can help me out.I have created a rule in EPL
that should trigger whenever the corresponding event occurs in one of
the metafields. I would also like to receive an alarm if a certain IP
range occurs. In order not to list the...
Hello Eric, thank you for your help.Unfortunately, there are no matches
in the other meta fields, so I cannot group over them. Exactly, I select
via country.src There is still the possibility to solve the whole thing
via a feed, but I don't think tha...
Hello Abu, your rule cannot be deleted because of
dependencies/references. Please try the following: + First delete the
report for this rule and then try to delete the rule again. + If this
still doesn't work, try to delete the App-Rule for this rule...
Hello Naushad, thank you for the advice. You were absolutely right, the
report can also be executed with the error message.Thank you for your
support and quick help. Kind regardsHidayat
Hello Naushad, thank you for your answer. I still get an error message,
even if I put a quotation mark around the special characters.If I put
one or two backslashes before the special character, I still get the
same error message. Many greetingsHiday...
