IP address separating from 1 source

Ephrem32 · ‎07-14-2020

I have a list of ip address that come from 1 source, I want a query to list the ip address separately and make them their own value so when I click on each ip address they are their own event etc.

Thank you,

richgalloway · ‎07-14-2020

Check out the mvexpand command.

---
If this reply helps you, Karma would be appreciated.

IP address separating from 1 source

regex

subsearch

table

Splunk Mobile: Your Brand-New Home Screen

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

Are you a member of the Splunk Community?

IP address separating from 1 source

regex

subsearch

table

Splunk Mobile: Your Brand-New Home Screen

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...