ThreatHunting
ThreatHunting copied to clipboard
404 Error - when trying to edit the macro
We are getting a 404 error when we try to edit the macro to suit our organization needs as per your instructions in ‘Required actions after deployment' Section. (https://YOURSPLUNK/en-US/manager/ThreatHunting/admin/macros)
Can you help us on this?
Any updates on this please?
I am having the same issue
You should be able to edit your Macros in Splunk by going to: Settings > All configurations
This link should also take you there: https://yoursplunk/en-US/manager/ThreatHunting/admin/directory
From there, filter by App: ThreatHunting Look for Config type: Macro.
You can click any which you want to edit from there. I searched in browser for "index=" and identified the indexes which needed renaming.