IP address separating from 1 source

Ephrem32 · ‎07-14-2020

I have a list of ip address that come from 1 source, I want a query to list the ip address separately and make them their own value so when I click on each ip address they are their own event etc.

Thank you,

richgalloway · ‎07-14-2020

Check out the mvexpand command.

---
If this reply helps you, Karma would be appreciated.

IP address separating from 1 source

regex

subsearch

table

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Are you a member of the Splunk Community?

IP address separating from 1 source

regex

subsearch

table

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management