Hello Splunk community, I need to be able to run some reports that shows all traffic logged by my firewalls and provide the following fields: Report 1: - Source IP - Destination IP - Application (exclude unknown-tcp and unknown-udp) - Action - Count Report 2: - Source IP - Destination IP - Protocol - Destination Port - where Application equals unknown-tcp and/or unknown-udp - Action - Count I am completely new to Splunk. I was introduced to it this Monday when I was given this task. Any assistance will be greatly appreciated. ... View more