Splunk Search

Search for device type

brian_runyon
New Member

I want to determine how many times a call has been completed or attempted by searching for a specic device name/type (ex. ABC12345).

I've tried sourcetype=ABC*, sourcetype="ABC*" and get no results.

Thank you!

Tags (1)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

I'm not sure what kind of data you are looking at but sourcetype classifies the type of data. So, for example access_combined apache web logs, or Windows Event logs etc....Go to Manager -> Search App. Then you'll see a summary of sources, sourcetypes and hosts. You can click on one of those links and it will modify your search specifically to that type of data.

Just put ABC in the your search bar and that will give you what you are looking for or something like host="ABC*" OR host="AB*" etc...which would be more specific than just searching for ABC*.

Take a look at some examples here:

http://docs.splunk.com/Documentation/Splunk/latest/User/Searchexamplestutorial

View solution in original post

sdaniels
Splunk Employee
Splunk Employee

I'm not sure what kind of data you are looking at but sourcetype classifies the type of data. So, for example access_combined apache web logs, or Windows Event logs etc....Go to Manager -> Search App. Then you'll see a summary of sources, sourcetypes and hosts. You can click on one of those links and it will modify your search specifically to that type of data.

Just put ABC in the your search bar and that will give you what you are looking for or something like host="ABC*" OR host="AB*" etc...which would be more specific than just searching for ABC*.

Take a look at some examples here:

http://docs.splunk.com/Documentation/Splunk/latest/User/Searchexamplestutorial

brian_runyon
New Member

I think I may have found my answer.

index=eucp | eventstats count(SEP*)

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...