...ours. not sure why I let it finish)
I figure that I could use this report to do quick research on users/logons that I might see in a new computer/logon alert (to be created). So I built a d...
I'm trying to optimize a query joining multiple sourcetypes based on a key. I would appreciate any suggestions on how to speed it up.
I am trying to obtain a summary of the beacon-spans for an in...
Wondering if there is a reference guide to help me understand functions and terminology for Splunk Infrastructure Monitoring or IMM as part of the Splunk Observability Cloud offering?
Hi, I have a query that is giving me results in around 60-70 seconds I wanted to reduce the time, seems NOT is taking more time and my search is parsing for around 35-40 seconds. Please help me to optim...
...rror in segment CSC 06 1 1A TKA in element #2.
------ Error at <src/CBRMessageDecoders.cpp:121 Error in group Group id: _294728_G_CBR in element #3.
------ Decoding error in message AIRRQT 1...
...onumber(substr(IP,27,2))
| eval a=tonumber(substr(IP,29,2))
| eval a=tonumber(substr(IP,31,2))
| IP = a+"."+b+"."+c+"."+d
Someone know another method more efficient to do it optimizing the macro execution?
...3" AND subgroup=="26" | mvexpand secId_new | stats count by secId_new | rename secId_new as Avsnitt
THEN got this error when it runs over 1 year's data.
Any ideas?
Thanks in advance!
Hi team! How can I optimize the following search? I want to find ips that have made an attack and have been blocked by the UTM but that have registered any allowed connection. &n...
...lso all users who have logged in but not logged out
And finally users who have logged out in the given time frame.
I am not sure how can I use subsearches or xyseries to optimize this query.