Splunk Search

Search criterial

andy_macn
New Member

I have a search that takes logs from an SSL vpn and shows me failures what I would like to do is put a time frame in the search to get rid of failures that have successfully logged on after a set period ie within a minute is this possible need some help on this

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Can you describe your use case more, please?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...