Hi @srinij - It looks like your post is missing information. You mention, "I would like to find the unique pattern like this" and nothing else is written. You will likely need to provide more information to the Answers community about what you would want your expected result to look like so that users can better help you. Thanks. ... View more

Just a friendly reminder: if you want to keep your code formatting, be sure to wrap your code in a code sample so that any special characters (like an asterisk) are rendered properly. Use the code sample icon in the toolbar to do this (it's to the right of the blockquote/quotations icon). Thanks. ... View more

Hi @jambraun - Glad to hear that you got some good answers from to your question. If one of them has helped to resolve your issue, please don't forget to click "Accept" below the best answer and upvote anything that was helpful. Thanks! ... View more

Hi @jd0323fhl - If you were able to answer your own question, please don't forget to resolve this post by clicking on "Accept" below your answer. Thanks! 🙂 ... View more

Hi corners, Just to add to hunters' great answer and to address your question about S.o.S. - Splunk on Splunk: According the S.o.S Splunkbase page, as of Splunk Enterprise 6.3, this app is End of Life. It has been replaced and superseded by the Distributed Management Console (DMC). But now as of 6.5.0, the DMC is now known as the Monitoring Console. ... View more

@valentinv - It would be better if you posted a new question regarding this. Thank you. ... View more

Don't worry about the formatting, @kevbod - that's why we have moderators for newbies on Answers 🙂 Also, if lguinn or maciep helped to answer your question, please don't forget to resolve this post by clicking "Accept" below the best answer--don't forget to up vote anything that was helpful too! If you still need some additional help, however, please leave a comment with some feedback for them. Thanks! ... View more

Hi @scheckenbachb - Did the answers provided by lguinn or ChrisG help at all? If so, please don't forget to resolve this post by clicking "Accept" below the best answer and up vote any comments you found helpful. If not, please provide some more feedback by leaving a comment. Thank you! ... View more

Hi @srinitest123 - I saw that you up voted msivill's answer. If it helped answer your question, please don't forget to resolve this post by clicking "Accept" below the answer. Thanks! ... View more

Hi @vikram_m - Glad to hear that lguinn and ddrillic were able to provide helpful feedback. Please don't forget to resolve this post by clicking "Accept" below the best answer 🙂 Thanks! ... View more

Hi @john122089 - If somesoni2 ended up answering your question, please don't forget to resolve this post by clicking on "Accept" below the answer 🙂 If not, please provide him with some more feedback. Thanks! ... View more

Hi @jantman - Do you want to resolve your post by clicking "Accept" below your answer? Or do you want to leave it open and wait until another user shares a possible alternative solution for you? ... View more

Hi @dileep_jasper, You can find the Splunk App for Jenkins here on Splunkbase: https://splunkbase.splunk.com/app/3332/ It looks as though the Jenkins Plugin for Splunk that is referenced in that presentation is not yet available. Perhaps the app creator will comment on this post as to when that may be available for use. ... View more

Hi @jmajumdar - Looks like you got some great answers; did they help you to understand how this app works? If so, don't forget to resolve this post by clicking "Accept" below the best answer and up voting. If not, please provide a comment with more information. Thank you! ... View more

Hi @Jrubalcaba - Looks like you got some good feedback about your question. If one of the answers below has helped, please don't forget to resolve this post by clicking "Accept" below the best answer. If not, please write a comment to share more information. Thank you. ... View more

Hi @ankithreddy777 - I got a notification that you accepted the answer by rjthibod but then I saw this post and it was unaccepted. Did you accidentally unaccept the answer? ... View more

Hi @Deepali529 - Did one of the answers below help solve your question? If yes, please click on "Accept" below the best answer to resolve this post. If not, please comment with feedback. Thank you! ... View more

Hi @rhinomike - If any of the below answers has helped, please don't forget to click on "Accept" under the best answer to resolve this post. Thank you! ... View more

Hi @jtashiro, Have you checked out the accepted answer at this link? It may be a good place to start. However, if you are not satisfied with that explanation, I would suggest posting a new question about this topic since this post is from over 3 years ago and may not get the visibility you would like in order to help you. ... View more

@ChrisG is correct. There is no back button in the exam, nor can you mark questions for review later. I assume it is because it is already an open note exam. Use the results emailed to you after completing the exam so you know what categories/areas to review again before you try again 🙂 ... View more

Got it. I just updated your post to include the add-on tag and to incorporate some of the information you left in your comment. Thanks! ... View more

Hello @jeremeek - Is your question also in reference to the Splunk Add-on for Cisco ASA? https://splunkbase.splunk.com/app/1620/ If yes, please let me know so I can make sure that add-on is tagged to your post. Thank you. ... View more

Hi @aparnaa - Just want to add to @acharlieh's great answer above 🙂 I recently took the Power User exam myself and you can definitely pass as long as you take into account the points that acharlieh made above. The Power User Exam is an open note exam that you can retake up to 3 times. In the event that you do not pass on your first attempt, the exam results are very transparent in the areas in which you may need more improvement so you can review that material again before you retake it again. The tip that I would give you is to take your time reviewing any material that is still unclear or confusing for you, especially if you are brand new to Splunk. Go back to that course again, revisit the videos and/or retake the labs, or read the our Splunk documentation--basically review anything that will help you understand the material/concept. Another exam prep that you can try (especially if you don't have a Splunk instance to try out what you've learned) is to take the Search Tutorial You can do it--good luck! ... View more