All,
Below is a link to the new SPL Safeguards feature that came out it 6.4. It is set up to warn users about dangerous commands to review before running.
I would like to know if this can be customized to other commands and/or also potentially be able to warn against bad search habits like if someone who uses `index=*` or does NOT include an `index=` in their search.
http://docs.splunk.com/Documentation/Splunk/6.4.3/Security/SPLsafeguards
Any information would be useful.
Thanks
Rich
↧