...xcellent Custom Function that looks in the cached SOAR internals for the cached results from previous executions of a specific app/action. He did mention that this was a 'work in progress' and I can't find t...
Can someone help me break down this portion of a search? Is it saying, look for anything older than 30 minutes? eval recent = if(latest > relative_time(now(),"-30m"),1, 0), realL...
Hello There, I'm a bit rusty when it comes to the syntax and I am trying to get a better grasp. I have an if else function, so if lets say ABC is greater than 3600 add 21600 seconds else don't add a...
hi all, am running into an inconsistency with simple round function depending on the decimal placing, here's wat am getting index=_internal type=usage | eval totalGB = b/(1...
I have added 2 JS file in my dashboard XML. Want to override a on click(button) function defined in JS-1 in JS-2 and want the dashboard to call the overridden function. The first JS is common one u...
Hi, I wonder whether someone may be able to help me please.
I've been reading the Splunk documentation on the 'coalesce' functionand understand the principals of this.
The example in the S...
Hi Splunkers,
when i'm running first Search returns getting zero value where as second Search giving correct value. Explain me how its working,
Search 1:
|stats count | eval next_time=relat...
I'm trying to use the map command and it seems to fail when I try using some functions within the subsearch (specifically: cidrmatch()). This search returns a correctly-populated t...
I'm trying to understand the functionality of keepevicted. I've read several documentation about it but it's still not clear. I've made a search with transaction. Without keepevicted I get 5...