...xcellent Custom Function that looks in the cached SOAR internals for the cached results from previous executions of a specific app/action. He did mention that this was a 'work in progress' and I can't find t...
Hello,
I'm new to Splunk and I'm having trouble with the following line of code. I think what I'm trying to do is pretty self-explanatory. Essentially the data I'm working with is one column and t...
Can someone help me break down this portion of a search? Is it saying, look for anything older than 30 minutes? eval recent = if(latest > relative_time(now(),"-30m"),1, 0), realL...
...ny time. I have 3 of these types of conditions, but they are all under the same field name. The struggle for me is combining these if else functions into one multi conditional function. I have s...
hi all, am running into an inconsistency with simple round function depending on the decimal placing, here's wat am getting index=_internal type=usage | eval totalGB = b/(1...
...sed by many apps, so can not change that one. I am basically setting the time picker token in both functions with different token value. On clicking it is calling both functions as it is p...
Hi, I wonder whether someone may be able to help me please.
I've been reading the Splunk documentation on the 'coalesce' function and understand the principals of this.
The example in the S...
Hi Splunkers,
when i'm running first Search returns getting zero value where as second Search giving correct value. Explain me how its working,
Search 1:
|stats count | eval next_time=relat...
I'm trying to use the map command and it seems to fail when I try using some functions within the subsearch (specifically: cidrmatch()). This search returns a correctly-populated t...