Splunk Enterprise Security

Search common url visited by multiple users

abhik1501
New Member

How do i make a query for proxy logs to check multiple users visiting the same links

0 Karma

gfreitas
Builder

I good start using the datamodel accelerated data from ES is: | tstats summariesonly=true dc(Web.user) from datamodel=Web by Web.url

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In September, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...