Splunk Enterprise Security

Search common url visited by multiple users

abhik1501
New Member

How do i make a query for proxy logs to check multiple users visiting the same links

0 Karma

gfreitas
Builder

I good start using the datamodel accelerated data from ES is: | tstats summariesonly=true dc(Web.user) from datamodel=Web by Web.url

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!