About usmsplunksme

usmsplunksme · ‎08-06-2020

HI fellow splunkers, I am trying to count a distinct number of applications from our logs. Query is: Index=something app!="null" | dedup app | stats count by app i am looking to use the single value and trendline to show the number of "apps" and whether there has been a decrease or increase.

usmsplunksme · ‎06-14-2020

Hi All, Splunk documentation for SAI says it's compatible with Windows Add on from version 5.0.1 onwards. I have version 6.0 and can't seem to get perfmon data from the app. does anyone know how to configure this? or what data SAI uses from the windows Add on?

usmsplunksme · ‎06-01-2020

Hi all, any assistance with this app would be grateful. I managed to connect to our LA workspace and receive logs in splunk, but none of the logs have any extractions. any assistance would be appreciated.

usmsplunksme · ‎06-12-2019

HI Shankaranath, extracted values are: 1325376000 1338508800 1370908800 1439856000 1447286400 1447718400 1448928000 1456185600 1457049600 1457222400 1457654400 1458604800 1460073600 1464739200 1468713600 1470009600 1473206400 1475020800 1475366400 These are supposedly a date. Thanks for the assistance

usmsplunksme · ‎06-11-2019

Thanks for the answere that seemed to convert the string to a date and time format. but when i try and convert all entries in the extracted field it fails. my query is: Search query | eval StartTime=strftime("extracted_field","%Y/%m/%d %H:%M:%S") | table StartTime

usmsplunksme · ‎06-10-2019

HI, In the "Compromised Credential" alert type there is also a field called "breach_date" but the results are not in readable format (e.g 1383436800) is someone please able to assist in calculating this field to a more readable date?

Posts	6
Solutions	0
Karma Given	1
Karma Received	1
Member Since	‎06-10-2019

Online Status	Offline
Date Last Visited	‎08-13-2020 06:45 AM

Single value for specific field

SAI and Windows Add on Compatability

Logs not extracting

Help with Netskope Breach_date calculation

Single value for specific field

SAI and Windows Add on Compatability

Logs not extracting

Re: Netskope Breach_date calculation

Re: Netskope Breach_date calculation

Help with Netskope Breach_date calculation