Getting Data In

Single Splunk command to generate dummy data that can be run in the search bar

lukesplunklukes
New Member

Can someone advise on a single Splunk command that can be run in the search bar that will display dummy data? This was demonstrated by an instructor in the past but I can't remember what the command was

Tags (1)
0 Karma

mjuestel2
Path Finder

I believe the command you are looking for is scrub.

I attended .Conf last year where an instructor used this command to replace "real data" with dummy information, while keeping the format of the data. 

This command comes in useful when wanting to anonymize the data, when passing it on to a 3rd party etc.

I use it when pasting data into 3rd party websites, to work on Regex extractions.



|scrub

 

 

Tags (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Well... scrub can work strangely sometimes.

For example, scrubbing my firewall logs shows that my firewalls do actions:

- allowed
- blocked
- dropped
- mckenzie

🤣

0 Karma

woodcock
Esteemed Legend

There is also | streambag.

0 Karma

woodcock
Esteemed Legend

You can use | gentimes, too.

0 Karma

lweiss
Explorer

Try this, it'll generate 100 dummy events for you.

| windbag
0 Karma

mstjohn_splunk
Splunk Employee
Splunk Employee

hi @lukesplunklukesplunk

Did the answer below solve your problem? If so, please resolve this post by approving it!
If your problem is still not solved, keep us updated so that someone else can help ya. Thanks for posting!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps it was | makeresults?

---
If this reply helps you, Karma would be appreciated.
0 Karma

lukesplunklukes
New Member

Thanks for answering but nope, thats not the one I was thinking of

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...