×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
a_m_s
Explorer
Member since: ‎10-10-2018
‎10-03-2023
Community Statistics
Posts 9
Solutions 1
Karma Given 10
Karma Received 1
Member Since ‎10-10-2018
Activity Feed
View All

Python Script Optimization

by in Getting Data In
‎09-23-2023 10:46 PM
‎09-23-2023 10:46 PM
To all the python masters out there :: Python Execution Time Optimization using multi-threading. I have a python script which takes a list of 1000 IP from a file and does port monitoring 3389 and 22 respectively using the os module of python . It is taking as of now 40 minutes to run. The requirement is to run the same scripted input within 10 minutes.   I have tried multi threading but the output is not sequential so I am not able to ingest... ... View more

Re: CrowdStrike app fails: Fail to decrypt the enc...

by in All Apps and Add-ons
‎10-11-2022 04:25 AM
‎10-11-2022 04:25 AM
Thank you @davidveuve  for the solution , was searching from a long time . Also i was wondering how did you came to observe this behavior of AOB. ... View more

Re: transforms.conf not working

by in Getting Data In
‎01-24-2022 06:21 AM
‎01-24-2022 06:21 AM
@prashant_kumar_  use this transforms [hostoverride] REGEX = hostname\"\:\"(.*)\" DEST_KEY = MetaData:Host FORMAT = host::$1 props.conf  [override] TRANSFORMS-ooo = hostoverride INDEXED_EXTRACTIONS = json DATETIME_CONFIG = CURRENT LINE_BREAKER = ([\r\n]+) NO_BINARY_CHECK = true disabled = false pulldown_type = true my test file  {"geo":"NA","city":"UK","country":"London","hostname":"lp5cd8213yt4"}      ... View more

Re: Group by multiple attribute and get count per ...

by in Dashboards & Visualizations
‎01-19-2022 06:52 AM
‎01-19-2022 06:52 AM
@anilbabuk  | eval TT=File."-".User | fields - File User | chart count over TT by Date | eval File=mvindex(split(TT,"-"),0) | eval User=mvindex(split(TT,"-"),1) | fields - TT | table File User * ... View more

Re: Adding tooltip to panel on a hover

by in Dashboards & Visualizations
‎09-06-2020 12:48 PM
1 Karma
‎09-06-2020 12:48 PM
1 Karma
Thanks @niketn  for this walkthrough ... View more

Re: Extract full XML from Windows EventLog sent by...

by in Getting Data In
‎01-20-2019 10:54 PM
‎01-20-2019 10:54 PM
You can used spath also.You will get two fields.Use eval to concatenate the two fields. ... View more

Re: Extract full XML from Windows EventLog sent by...

by in Getting Data In
‎01-18-2019 04:39 AM
‎01-18-2019 04:39 AM
Your "preferred" result :)- event_source|rex field=_raw "(.?)>(.?))<\/Data>" max_match=20 | mvexpand a | rex field=result mode=sed "s/>/=/g" ... View more

Re: How do you extract an XML tag from _raw field?

by in Splunk Search
‎12-24-2018 04:22 AM
‎12-24-2018 04:22 AM
If you are explicitly looking for faultstring tag only then the following regex should work. (?.*)<\/faultstring> ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎10-03-2023 07:03 AM
Karma from
View All
Karma given to