I have my splunk Jason in below format { [-]
delete_me: True
vendor: Dbruzy
name: Rahul
date: [ [-]
10-jan-2022
30-dec-2022
]
count_target: [ [-]
1700
300
]
site: India
type: Sales
} ...
I'm trying to use the map command and it seems to fail when I try using some functions within the subsearch (specifically: cidrmatch()). This search returns a correctly-populated t...
How can I, from an IP, obtain its location to bring information by region? In the example below I only have the IP column, I need to bring information about the country and region of the same. &...
Hi All,
We have a scripted input, which indexes JSON data into Splunk and using SPATH we have writing our correlation rules. Now that we have Splunk ES, we would like to map JSON data to CIM in S...
hi I use the search below in order to display the number of events corresponding to my main search on a cluster map There is a gap between the results displayed on my map and the results of the m...
I am trying to draw a map from coordinate data.
Originally a geojson format file, so I did not create lookup and imported it into Index.
count featureId geom
1289 Yokohama { "t...
Hi Team, I am having a difficulty in understanding map command. In the below commands, we need to extract work order ID from one sourcetype and using that, I need to extract sessionid corresponding t...
...lear to me how to map data (Step 2 Configure Metadata).
How the table below could be filled?
Event type_Index_Sourcetype
Build Report_index?_sourcetype?
Build Event_index?_sourcetype?
Queue I...
Hi, I'm doing CIM Mapping and the data I have is from Dynatrace. It's JSON format.
I had to do Field Extraction to get a field that would map to the action field in the Authentication Data Model....