All Apps and Add-ons

How to filter by port number?

Tyler
Explorer

For instance, I want to filter for HTTP from 192.168.0.100. The closest I can get:

 

remoteAddress = 192.168.0.100
protocol = tcp

 

Is there no way to include the port?

https://docs.splunk.com/Documentation/Splunk/8.2.4/Admin/Inputsconf#Windows_Host_Monitoring

Labels (3)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...