Splunk Search

How to search with result string with "../"?

mclane41
Explorer

Try this request on Splunk :

 

 

| makeresults | eval redir="../../app"

 

 

My request is automatically transformed by 

 

 

| makeresults | eval redir="app"

 

 

How can I have a work around ?

I try on chrome or firefox without success.

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @mclane41,

I tested your issue on an 8.2 version and the issue is present.

This means that this is a known issue solved with the new versions, so the only solution is to upgrade Splunk.

Ciao.

Giuseppe

 

View solution in original post

mclane41
Explorer

I work with the version Enterprise 8.2.0

mclane41_0-1677145819805.png

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @mclane41,

I tested your issue on an 8.2 version and the issue is present.

This means that this is a known issue solved with the new versions, so the only solution is to upgrade Splunk.

Ciao.

Giuseppe

 

gcusello
SplunkTrust
SplunkTrust

Hi @mclane41,

also on 9.0.4 works fine!

gcusello_0-1677137884464.png

ciao.

Giuseppe

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Which version of Splunk are you using?  The first query works for me in 9.0.0.1.

richgalloway_0-1677089502677.png

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...