topic Help with query to find out activity towards a particular URL in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596115#M10782 <P>query to find out activity towards a particular URL</P> <P>eg: URL -&nbsp;<A href="https://www.microsoft.com/en-us/security" target="_blank" rel="noopener">https://www.microsoft.com/en-us/security</A></P> Mon, 02 May 2022 16:57:18 GMT cyber_Maddy 2022-05-02T16:57:18Z Help with query to find out activity towards a particular URL https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596115#M10782 <P>query to find out activity towards a particular URL</P> <P>eg: URL -&nbsp;<A href="https://www.microsoft.com/en-us/security" target="_blank" rel="noopener">https://www.microsoft.com/en-us/security</A></P> Mon, 02 May 2022 16:57:18 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596115#M10782 cyber_Maddy 2022-05-02T16:57:18Z Re: query to find out activity towards a particular URL https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596116#M10783 <P>What events do you have available to search?</P><P>What sort of activity are you trying to discover?</P> Mon, 02 May 2022 07:34:22 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596116#M10783 ITWhisperer 2022-05-02T07:34:22Z Re: query to find out activity towards a particular URL https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596120#M10784 <P>There is a malicious website Eg: <A href="https://xxxx.xxxx.com" target="_blank" rel="noopener">https://xxxx.xxxx.com</A></P><P><SPAN>I just wanted to find out if anybody tried to access</SPAN>&nbsp;the URL<A href="https://xxxx.xxxx.com" target="_blank" rel="noopener">https://xxxx.xxxx.com</A>&nbsp; from my organization&nbsp;<SPAN>or any communication from the malicious URL&nbsp;<A href="https://xxxx.xxxx.com" target="_blank" rel="noopener">https://xxxx.xxxx.com</A>&nbsp;to our network.</SPAN></P><P>Firewall , Crowdstrike - are the available data</P> Mon, 02 May 2022 08:31:45 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Help-with-query-to-find-out-activity-towards-a-particular-URL/m-p/596120#M10784 cyber_Maddy 2022-05-02T08:31:45Z