Hi I try to filter my table events from à dropdown list like this Owner=$owner$ The item syntax in the dropdown lis is like REM\A-AA228339 I tried with Owner="$owner$" but it doesnt works W...
I am trying to list all sourcetypes in an index using dc
Using index="test" | stats dc(sourcetype) as sourcetypes only shows the total number of sourcetypes but does not list them individually.
I would like to find a way to list the dependency between dashboards and indexes. I'm using the following query to get the list of all the Dashboards using the index Oracle which is an event Index....
Hi, I have the following Link List input to provide a shortcut to other dashboards, when any of them are selected it would open a new tab to the specified dashboard. The issue is that when a link i...
...ey3n": "val3"
}
}
I want to list all the unique keys present under the path "details." I tried querying it using mvexpand and json_keys, but nothing seems to be w...
I'm attempting to determine what folders on a Windows server are being audited. I don't have access to the server to view the inputs.conf file and need to discover what folders are being accessed fro...
...lients. But when I do ./splunk list deploy-clients, it is showing "No deployment clients have contacted this server". What is going wrong here ? Please can anyone of you help me. Regards, PNV
Hi Splunk Community, I'm trying to list all splunk local users (authentication system = splunk) . The below search lists all users SAML and Splunk but I'm only looking for local accounts. | r...
Hi, I have a field called "catgories" whose value is in the format of a JSON array. The array is a list of one or more category paths. The paths are in the form of a comma separated list of o...
In a playbook, I have a decision tree. If option A -> Check List -> If Value Exists in custom list -> Do Nothing Else If Option b -> Check list -> If Value Exists in custom list...