Splunk Search

How can I search IPs within the Rapid 7 App for Splunk Enterprise?

Securitas
Engager

I'm trying to search for some IPs of interest within the Rapid 7 App for Splunk Enterprise.
Is there a way to do that?

0 Karma
1 Solution

joshfenton01
Explorer

The app is just a dashboard, but from within your search console you can use this simple query to search via IP. Assuming you did not change the source type when you configured the rapid7 app.

sourcetype=rapid7_nexpose dest_ip="x.x.x.x"

View solution in original post

0 Karma

joshfenton01
Explorer

The app is just a dashboard, but from within your search console you can use this simple query to search via IP. Assuming you did not change the source type when you configured the rapid7 app.

sourcetype=rapid7_nexpose dest_ip="x.x.x.x"

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...