all_backup_logs_for_host.yml

name: All backup logs for host
id: bc91a8cf-aaaa-4bb2-8140-e756cc06fd72
version: 1
date: '2017-09-12'
author: Rico Valdez, Splunk
type: Investigation
datamodel: []
description: Retrieve the backup logs for the last 2 weeks for a specific host in
  order to investigate why backups are not completing successfully.
search: '| search `netbackup` dest=$dest$'
how_to_implement: The successfully implement this search you must first send your
  backup logs to Splunk.
known_false_positives: none
references: []
tags:
  analytic_story:
  - Monitor Backup Solution
  product:
  - Splunk Phantom
  required_fields:
  - _time
  - dest
  security_domain: endpoint