Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
15 results
Sorted by:
04-26-2019
08:04 AM
So i want to bulk tag multiple field values with the same Tag/alias using the Splunk Web search and not Linux configurations settings. I am trying to tag roughly 800 windows, and 800 linux so thats w...
04-23-2019
01:04 PM
...alias iis : FIELDALIAS-host/cs_host AS host]
I have resorted to the test data in samples iis.log
Does any one know if this website config will work for the test data? or any other p...
10-01-2018
04:26 PM
...ork when I viewed the dataset's values. The docs don't even mention the "named" column so it makes me wonder if I"m doing it right.
I tried to create an alias for CIM app and my src_ip custom field (c...
- Tags:
- cim
- splunk-enterprise
03-27-2020
07:58 AM
...OURCE_KEY = field:lineobj
DEST_KEY = _raw
REPEAT_MATCH = true
The above succeeds in extracting the json field/values out of 'line' - the 'lineobj' field appears in the fields list in Splunk Web...
03-30-2016
01:32 PM
...roblem is compounded by the fact that the extracted signature_id field is leveraged in all the eventtypes and tags within the TA too.
The field is really simply based upon EventCode, which is a n...
10-03-2019
01:05 AM
Now i very interested with command Spath of Splunk, can auto extract values JSON. But i can't extract it to field in index, sourcetype ?
Example: Raw json in field src_content:
index=web s...
07-27-2020
12:54 PM
...est practices to manage entities in this case. 1. Should I have created 2 other entities with different aliases? That is the second one E2 which has alias "hostname=web01" and E3 w...
Labels
- Labels:
-
using ITSI
05-17-2010
04:07 PM
I am looking to alias several field names from multiple sources/hosts with an alias of 'Username'.
When looking in the field alias section of splunk manager, there is the option to alias by S...
- Tags:
- field-extraction
- tags
07-04-2013
01:44 AM
09-30-2017
01:51 PM
I do use eventtypes.conf to extract fields.
Then in tags.conf I do set warning=enable for some of the fields.
Some is error and other is information.
In my search, this then shows up as e...
