This is a generic question and my apologies if it has already been published somewhere, but I could not glean from my initial google searches. Given the influx of supply chain attacks through code, am wondering if Splunkbase reviews sourcecode for malicious code before publishing here? ... View more

host time timediff a 12:00 END a 11:55 1 a 11:50 1 I want to replace the "END" in timediff with the below value: timedifference of the first 2 rows - i.e 12:00 - 11:55 and add the timediff of the second row which is 1 . Essentially , its 5 + 1 = 6 which should be the new value of END I have used delta command to get the 6 value but am struggling to replace the END with the value. ... View more

I have a requirement wherein I have to find timedifference of 2 events. Below is an example on the event type: Host Time SeqID Transaction a 1:00:00 5 Start b 1:30:00 7 Start a 1:45:00 9 Complete b 2:00:00 14 Complete a 4:00:00 19 Start c 4:30:00 23 Start a 4:45:00 25 Complete I need to calculate the timedifferences between 'Start' and 'Complete' for every Host using their SeqID. To translate roughly, its like concat(hostname,Time@Complete,SeqId@Complete) - concat(hostname,Time@Start,SeqID@Start) But in the above calculation, i need to ensure the SeqID@Complete is the most numerically nearest one to the SeqID@Start. Any thoughts / suggestions? ... View more

I am trying to write an alert in Splunk which will tell us if the 2 DNS servers we have setup for a domain are working as intended. I want to use NSLookup and not Ping to verify the DNS servers are translating the IPs. The Network Tools app has NSLookup command syntax as | nslookup hostname This command works but does not use the DNS servers I intend to test. I would like to see if we can have the command work in this manner: | nslookup hostname Dns-Server I looked in nslookup_Search_command.py file, and see it has result=nslookup(host=self.host, server=self.server, index=index, logger=self.logger) I am wondering if the Server is meant to be the DNS server in the above line and if its worked for anyone. Thoughts?? ... View more