Splunk Search

Splunk query to find browsers installed on a machine

Roy_9
Motivator

Hi,

can someone help me with splunk search to identify browsers installed on a machine, im looking for a specific field where i can capture this data.


thanks

Labels (4)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What data do you have ingested into Splunk?

0 Karma

Roy_9
Motivator

@ITWhisperer we have splunk add-on windows deployed on all machines.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Extending @ITWhisperer 's answer - unless you have a third-party solution (some form of asset inventory software or even your own scripted input listing installed software), Splunk on its own cannot tell you since it only works on the data you give it. So by default you can only pull what your Windows machine produces (event logs, maybe some log files). So if you can find this info in what Windows report on its own - good, you can use it. But I don't recall that it does.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

OK so what information have managed to ingest into Splunk from them? Essentially, you can only query information which has been ingested (with a few exceptions).

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...