How can I, from an IP, obtain its location to bring information by region? In the example below I only have the IP column, I need to bring information about the country and region of the same. &...
Hello Splunkers ! i wanted to visualize data on map so i used this command and it worked: index=myFirewall | stats count by src_ip | iplocation src_ip | geostats count by Country b...
I am trying to draw a map from coordinate data.
Originally a geojson format file, so I did not create lookup and imported it into Index.
count featureId geom
1289 Yokohama { "t...
Hi All,
We have a scripted input, which indexes JSON data into Splunk and using SPATH we have writing our correlation rules. Now that we have Splunk ES, we would like to map JSON data to CIM in S...
...lear to me how to map data (Step 2 Configure Metadata).
How the table below could be filled?
Event type_Index_Sourcetype
Build Report_index?_sourcetype?
Build Event_index?_sourcetype?
Queue I...
Hi Team, I am having a difficulty in understanding map command. In the below commands, we need to extract work order ID from one sourcetype and using that, I need to extract sessionid corresponding t...
Hi there, Just a quick question on the cluster map that is not really displaying what we are aiming for... We have a simple query which is then piped to iplocation then geostats as this: &n...
Hi everyone
Someone who has used the map command who can help me, I am trying to bind the username of the 12 hours before the first search, but the result does not give any value
This is my q...