×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
a_m_s
Explorer
Member since: ‎10-10-2018
‎10-03-2023
Community Statistics
Posts 9
Solutions 1
Karma Given 10
Karma Received 1
Member Since ‎10-10-2018
Activity Feed
View All

Python Script Optimization

by in Getting Data In
‎09-23-2023 10:46 PM
‎09-23-2023 10:46 PM
To all the python masters out there :: Python Execution Time Optimization using multi-threading. I have a python script which takes a list of 1000 IP from a file and does port monitoring 3389 and 22 respectively using the os module of python . It is taking as of now 40 minutes to run. The requirement is to run the same scripted input within 10 minutes.   I have tried multi threading but the output is not sequential so I am not able to ingest... ... View more

Re: CrowdStrike app fails: Fail to decrypt the enc...

by in All Apps and Add-ons
‎10-11-2022 04:25 AM
‎10-11-2022 04:25 AM
Thank you @davidveuve  for the solution , was searching from a long time . Also i was wondering how did you came to observe this behavior of AOB. ... View more

Re: transforms.conf not working

by in Getting Data In
‎01-24-2022 06:21 AM
‎01-24-2022 06:21 AM
@prashant_kumar_  use this transforms [hostoverride] REGEX = hostname\"\:\"(.*)\" DEST_KEY = MetaData:Host FORMAT = host::$1 props.conf  [override] TRANSFORMS-ooo = hostoverride INDEXED_EXTRACTIONS = json DATETIME_CONFIG = CURRENT LINE_BREAKER = ([\r\n]+) NO_BINARY_CHECK = true disabled = false pulldown_type = true my test file  {"geo":"NA","city":"UK","country":"London","hostname":"lp5cd8213yt4"}      ... View more

Re: Group by multiple attribute and get count per ...

by in Dashboards & Visualizations
‎01-19-2022 06:52 AM
‎01-19-2022 06:52 AM
@anilbabuk  | eval TT=File."-".User | fields - File User | chart count over TT by Date | eval File=mvindex(split(TT,"-"),0) | eval User=mvindex(split(TT,"-"),1) | fields - TT | table File User * ... View more

Re: Adding tooltip to panel on a hover

by in Dashboards & Visualizations
‎09-06-2020 12:48 PM
1 Karma
‎09-06-2020 12:48 PM
1 Karma
Thanks @niketn  for this walkthrough ... View more

Re: Extract full XML from Windows EventLog sent by...

by in Getting Data In
‎01-20-2019 10:54 PM
‎01-20-2019 10:54 PM
You can used spath also.You will get two fields.Use eval to concatenate the two fields. ... View more

Re: Extract full XML from Windows EventLog sent by...

by in Getting Data In
‎01-18-2019 04:39 AM
‎01-18-2019 04:39 AM
Your "preferred" result :)- event_source|rex field=_raw "(.?)>(.?))<\/Data>" max_match=20 | mvexpand a | rex field=result mode=sed "s/>/=/g" ... View more

Re: How do you extract an XML tag from _raw field?

by in Splunk Search
‎12-24-2018 04:22 AM
‎12-24-2018 04:22 AM
If you are explicitly looking for faultstring tag only then the following regex should work. (?.*)<\/faultstring> ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎10-03-2023 07:03 AM
Karma from
View All
Karma given to