Splunk Search

Splunk query to find browsers installed on a machine

Roy_9
Motivator

Hi,

can someone help me with splunk search to identify browsers installed on a machine, im looking for a specific field where i can capture this data.


thanks

Labels (4)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What data do you have ingested into Splunk?

0 Karma

Roy_9
Motivator

@ITWhisperer we have splunk add-on windows deployed on all machines.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Extending @ITWhisperer 's answer - unless you have a third-party solution (some form of asset inventory software or even your own scripted input listing installed software), Splunk on its own cannot tell you since it only works on the data you give it. So by default you can only pull what your Windows machine produces (event logs, maybe some log files). So if you can find this info in what Windows report on its own - good, you can use it. But I don't recall that it does.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

OK so what information have managed to ingest into Splunk from them? Essentially, you can only query information which has been ingested (with a few exceptions).

Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...