Getting Data In

How to generate a list of just the IPs?

New Member

I have uploaded a single collection of logs for one time use in Splunk. I was wondering if there is a way to generate just a list of all the IP's listed in that collection? I can get the top IP hits, but I need all the IP's. Is there anyway to do this?

Tags (1)
0 Karma


To the end of your base do | dedup IP | table IP

Example would be sourcetype="foo" | dedup IP | table IP

0 Karma
Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...