Hi All,
We have a scripted input, which indexes JSON data into Splunk and using SPATH we have writing our correlation rules. Now that we have Splunk ES, we would like to map JSON data to CIM in S...
...his working by using map (see below), but it's very slow and not operable over large datasets/times. There must be a better way. I had issues with matching on the time range, and where it may not have a...
Hi, I'm doing CIM Mapping and the data I have is from Dynatrace. It's JSON format.
I had to do Field Extraction to get a field that would map to the action field in the Authentication Data Model....
If I have data which has lat and long data that is localized within a few miles, is there a way that I can map this on a map in Splunk?
The default map does not zoom to a level that is adequate e...
Hello All, I am trying to visualize data in a choropleth map using shapefiles. My goal is to show a count of a field by county in PA. I have yet to find a well configured shapefile for all c...
I have two columns one is datacenter location and second- number of servers, I want to show this on map, how to show it without latitude and longitude details. Do I need to upload csv with latitude a...
I have an environment with a large number of sourcetypes and would like to map those to the appropriate CIM data model. While I generally know about the Splunk commands pivot and datamodel, their u...
Hi,
I have a combination of consumer limits
e.g, A=1000 b=500 c=500 d=200 rest=100 So basically i want a list of all consumer who reached 80% limit. So i wrote a query for one consumer. how can ...