Splunk Enterprise Security

Can you help me with an extreme search problem I'm having on Splunk Enterprise Security?

chrischen2018
New Member
  1. Dynamic threshold for the Concept: min, low, high, extreme. Are there numerical values in each of the semantic terms? if yes, how do i modify them? If the modifications are to create our own custom semantic terms, then how do i create my own custom semantic terms?

  2. I understand that the Domain: requires a minimum, a maximum, and a total count of events. once i have the output for total count events (runs by a scheduled search) which will be a numerical value. How does this total count numerical value correlate to the concept OR to the context OR the extreme search itself?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...