topic How do I search for a single specific event? in Splunk Search

How do I search for a single specific event?

pallavi_prabhu_ — Tue, 08 Sep 2020 07:14:08 GMT

Re: How do I search for a single specific event?

thambisetty — Tue, 08 Sep 2020 07:27:25 GMT

Is there event id provided using Rest api of create event of HTTP event collector?

no.

it all depends on your HTTP event data. for example you are receiving events from HTTP Event Collector and you want to look for particular event from those events, you should know some keywords about the event.

Re: How do I search for a single specific event?

pallavi_prabhu_ — Tue, 08 Sep 2020 07:31:51 GMT

Ok. Do we have event id through any other event creation mode other than HTTP event collector?

Re: How do I search for a single specific event?

thambisetty — Tue, 08 Sep 2020 07:33:24 GMT

Splunk doesn't add anything to your raw event in any channel.

-------------------

give a thumps up if it solves your problem.