I'm using the map command to iterate through a list of devices and forecasting some of the metrics associated with each device. That's all working but what I really want is to then average t...
Hallo everyone!
I started to work with Splunk 2 mounths ago. I don't know where I can start to look for information, how to build a query and dashboard (flow map). Do you have any ideia?
Greetings
Hi at all, I'm configuring Enterprise Security but I found an unattended issue: I'm trying to use the Maps feature associated to a Source in "Incident Review" dashboard. In details: I have s...
Could someone have a look at the following query and see why it does not give me the results I expect based on the documentation of map?
index=portal sourcetype=app:*** source="log" c...
Hello I have a question 🙂
I am working on this map.
However, when "there are no resulst returned", I want to have the empty map and not this :
What can I do this ?&n...
Hi All,
We have a scripted input, which indexes JSON data into Splunk and using SPATH we have writing our correlation rules. Now that we have Splunk ES, we would like to map JSON data to CIM in S...
I have my splunk Jason in below format { [-]
delete_me: True
vendor: Dbruzy
name: Rahul
date: [ [-]
10-jan-2022
30-dec-2022
]
count_target: [ [-]
1700
300
]
site: India
type: Sales
} ...
I'm trying to use the map command and it seems to fail when I try using some functions within the subsearch (specifically: cidrmatch()). This search returns a correctly-populated t...