COVID-19 Response
SplunkBase
Developers
Documentation
Browse
Community
Community
Getting Started
Announcements
Welcome
Intros
Feedback
Splunk Answers
Splunk Administration
Deployment Architecture
Installation
Security
Getting Data In
Knowledge Management
Monitoring Splunk
Using Splunk
Splunk Search
Reporting
Alerting
Dashboards & Visualizations
Splunk Development
Developing for Splunk Enterprise
Developing for Splunk Cloud Services
Splunk Platform Products
Splunk Enterprise
Splunk Cloud
Splunk Data Stream Processor
Splunk Data Fabric Search
Splunk Premium Solutions
Security Premium Solutions
IT Ops Premium Solutions
DevOps Premium Solutions
Apps and Add-ons
All Apps and Add-ons
Discussions
Security & the Enterprise
DevOps & Observability
IT Operations Discussions
Splunk Tech Talks
Career Resources
#Random
Community Blog
Training + Certification
SplunkTrust
User Groups
Americas
Europe, Middle East and Africa
Asia-Pacific
Industry
Ideas
Sign In
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Search
Splunk Community
All community
Knowledge base
Users
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Ask a Question
Search
Search the Community
Showing results for
Search instead for
Did you mean:
Search Options
Subscribe to RSS Feed for this Search
Advanced
Hide Advanced
Posts
Users
Places
Advanced Search Options
Search Modifiers:
You can apply modifiers to the terms you enter in the search field.
Use quotes to search for an "exact phrase".
Use the plus sign to search for +one +or +more +words.
Use the minus sign to -exclude -certain -words from your search.
View results by
Topics
Specific posts
Results per page
10 results
20 results
30 results
40 results
50 results
Topics with no replies
Limits search results to topics that have no replies.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
in Splunk Answers
1 result
Sorted by:
Best Match
Date
Views
Karma
Replies
Best Match
Extreme Search Issue with xsWhere command
by
joshuamillikan
in
Splunk Enterprise Security
08-11-2017
04:05 PM
08-11-2017
04:05 PM
So having an issue with extreme search. I have a DD context generated for users sending emails based off their identity_id which populates fine. checked it via the xsdisplaycontext on the ID and get ...
Tags:
dd
extreme-search
match
Splunk Enterprise Security
Show results in replies (2)
...tatement. The command
xsFindBestConcept
can also be useful. Remember also that if a value is not in a c...
ya the
xsFindBestConcept
puts it squarely in minimal and it has a 1.0000 CIX in that. just v...