Splunk Enterprise Security

Can you help me with an extreme search problem I'm having on Splunk Enterprise Security?

chrischen2018
New Member
  1. Dynamic threshold for the Concept: min, low, high, extreme. Are there numerical values in each of the semantic terms? if yes, how do i modify them? If the modifications are to create our own custom semantic terms, then how do i create my own custom semantic terms?

  2. I understand that the Domain: requires a minimum, a maximum, and a total count of events. once i have the output for total count events (runs by a scheduled search) which will be a numerical value. How does this total count numerical value correlate to the concept OR to the context OR the extreme search itself?

0 Karma
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...