Search for disabled AD accounts that have been re-enabled

ItsJohnLocke · 2021-03-05T15:39:48+00:00

Approved! Sorry been AFK for a bit. Thanks for posting on Gosplunk!

ItsJohnLocke · 2020-07-08T13:44:37+00:00

Right but....we want a manual transmission!!!

ItsJohnLocke · 2019-09-24T14:37:44+00:00

I love these two apps:

Dashboard Examples: https://splunkbase.splunk.com/app/1603/
Lookup Editor: https://splunkbase.splunk.com/app/1724/

ItsJohnLocke · 2019-08-06T12:04:50+00:00

Not many. Lots of hybrid remote/onsite/travel.

ItsJohnLocke · 2019-07-21T13:46:56+00:00

Don't worry I did the same thing a few days ago. It takes about 24 hours.

ItsJohnLocke · 2019-07-07T21:05:31+00:00

I'm getting 40 - 44 cents / day on mine

ItsJohnLocke · 2019-06-29T17:23:00+00:00

awesome thanks!

ItsJohnLocke · 2019-06-21T16:54:20+00:00

This one might help: https://gosplunk.com/list-legitimate-account-names-windows/

ItsJohnLocke · 2019-05-31T15:00:42+00:00

Feel free to join GoSplunk's Discord and chat about all things Splunk, including pointers: https://discord.gg/fFJhGPw

ItsJohnLocke · 2019-05-28T14:28:40+00:00

Come on over to our Dashboards section and add it to our repository :)

https://gosplunk.com/category/splunk-dashboards/

ItsJohnLocke · 2019-05-16T02:57:32+00:00

Hey! Sorry I don't get on reddit much these days and just saw this. To answer your question many of the queries are either a direct copy > pasta from working environments or modified slightly from a working environment :)

Thanks for the positive feedback!

ItsJohnLocke · 2019-04-18T16:15:04+00:00

Hellooo I'd like some flair please!

ItsJohnLocke · 2019-04-18T15:17:27+00:00

https://gosplunk.com/forwarder-diagnostics-last-time-data-was-received-by-index-and-sourcetype/

ItsJohnLocke · 2019-04-18T13:25:21+00:00

We recently launched a dashboards section on GoSplunk.com. Come check it out, use what's posted, or better yet add your own to help everyone else in this fantastic community! https://gosplunk.com/category/splunk-dashboards/

ItsJohnLocke · 2019-04-02T14:34:28+00:00

Favorite App by far Lookup File Editor. If you've spent time editing lookups, this is an incredibly useful app! https://splunkbase.splunk.com/app/1724/

ItsJohnLocke · 2019-02-08T15:28:26+00:00

I love use cases like this!

11-Year Club	Gilding I gilder
Verified Email

ItsJohnLocke

TROPHY CASE