Re: IP address separating from 1 source

Ephrem32 · ‎07-14-2020

I have a list of ip address that come from 1 source, I want a query to list the ip address separately and make them their own value so when I click on each ip address they are their own event etc.

Thank you,

richgalloway · ‎07-14-2020

Check out the mvexpand command.

---
If this reply helps you, Karma would be appreciated.

IP address separating from 1 source

regex

subsearch

table

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

Index This | When is October more than just the tenth month?

Observe and Secure All Apps with Splunk

Are you a member of the Splunk Community?