Splunk Search

Exclude unwanted apps from web-logs

smith_
Builder

Hi,

Can anyone pls figure out from these  list of apps which of these apps from web logs are not required for investigation/needed for ingesting in to Splunk to save the license cost ?
ssl
windows-remote-management
web-browsing
sap
ms-office365-base
google-base
soap
new-relic
okta
ms-onedrive-base
windows-push-notifications
dns-over-tls
crowdstrike
dns-over-https
outlook-web-online
ms-store
paloalto-updates
websocket
apple-push-notifications
gmail-base
yahoo-web-analytics
whatsapp-web
naver-line
hotmail
http-proxy
adobe-creative-cloud-base
telegram-base
ocsp
pan-db-cloud
windows-azure-base
github-base
apple-update
deepl-base
slack-base
egnyte-base
teamviewer-base
google-meet
facebook-chat
concur-base
google-docs-base
qlikview
paloalto-wildfire-cloud
successfactors
reddit-base
bananatag
google-analytics
as2
cisco-spark-base
viber-base
jabber
google-chat
taobao
appdynamics
icloud-mail
cloudinary-base
zoom-base
imgur-base
webdav
splashtop-remote
zscaler-internet-access
google-drive-web
ms-onedrive-business
liveperson
discord
salesforce-base
tokbox
quora-base
paloalto-dns-security
giphy-base
vimeo-base
giphy-downloading
notion-base
webex-base
openai-base
paloalto-cloud-identity
zendesk-base
paloalto-logging-service
dailymotion
paloalto-prisma-sdwan-control
paloalto-shared-services
cloudflare-warp
sharepoint-online
facebook-video

 

Thanks

Labels (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This is an almost impossible ask as it depends on what scenarios you want to investigate and which of these apps are and are not involved.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...