Splunk Search

Data Models query



Can someone help with a query to identify any events which could align with existing Data models, that contain information like (Users,actions performed, session ids, etc), for specific source type and index.

Fields like Users, Actions Performed, Session id , do we need to extract, can someone help with the query?

Labels (3)
0 Karma