Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About bnybln030
bnybln030
Engager
Member since:
02-22-2022
03-11-2022
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 02-22-2022 |
Activity Feed
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 09:56 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 03:03 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 02:57 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 02:33 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 01:25 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 01:01 AM
- Posted How do I extract this field with regex for Nmap result? on Splunk Search. 03-11-2022 12:36 AM
- Karma Re: Minimaze and Maximize a Cell or Drilldown and short the Text in Zell for gcusello. 02-22-2022 06:34 AM
- Posted Re: Minimaze and Maximize a Cell or Drilldown and short the Text in Zell on Splunk Search. 02-22-2022 06:19 AM
- Posted Minimaze and Maximize a Cell or Drilldown and short the Text in Zell on Splunk Search. 02-22-2022 06:02 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-11-2022
09:56 AM
You are right, on my screenshot you see the complete search. With "max_match=0" i get the right results: If I dont set "max_match=0" then I get exactly the same result as with field extractor:
... View more
03-11-2022
02:57 AM
I see in the field extractor that only the first entry is recognized....
... View more
03-11-2022
02:33 AM
Yes, some of my events contain all 19 MAC algorithms but not all. Some of these algorithms only occur occasionally in other events. I try your search and it looks okay:
... View more
03-11-2022
01:25 AM
Here is now a picture from field extration in splunk. It is the same result like my search....
... View more
03-11-2022
01:01 AM
The problem is that not all values are found in splunk. I only see 8 but in the example on regex101 there are 19 different ones. Here you can see my result:
... View more
03-11-2022
12:36 AM
Hi i want to extract the mac_algorithms field with regex from a nmap scan result. Does anyone have an idea how it works best? I've tried a few things, not all fields are found in Splunk.
Here you can see my example: https://regex101.com/r/eJ16fA/1
Here my nmap-scanning example:
kex_algorithms: (8) curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group-exchange-sha1 diffie-hellman-group14-sha1 diffie-hellman-group1-sha1 server_host_key_algorithms: (4) ssh-rsa ssh-dss ecdsa-sha2-nistp256 ssh-ed25519 encryption_algorithms: (14) aes128-ctr aes192-ctr aes256-ctr arcfour256 arcfour128 chacha20-poly1305@openssh.com aes128-cbc 3des-cbc blowfish-cbc cast128-cbc aes192-cbc aes256-cbc arcfour rijndael-cbc@lysator.liu.se mac_algorithms: (19) hmac-md5-etm@openssh.com hmac-sha1-etm@openssh.com umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-ripemd160-etm@openssh.com hmac-sha1-96-etm@openssh.com hmac-md5-96-etm@openssh.com hmac-md5 hmac-sha1 umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-ripemd160 hmac-ripemd160@openssh.com hmac-sha1-96 hmac-md5-96 compression_algorithms: (2) none zlib@openssh.com"
... View more
Labels
- Labels:
-
field extraction
-
regex
02-22-2022
06:19 AM
Hi Guiseppe, thanks for your fast reply. Can u say me, what is the best way to drilldown the colum and open a new panel containing the full field? Kind Regadrs bnybln030
... View more
02-22-2022
06:02 AM
Hi everyone, i have in a table the result of a scanning script. Of course, the cells are much too large. Is there a way to minimize them and maximize them if necessary? A drill down to a new page would be also ok, but how can I shorten or change the text in the cell so that the drilldown function is still possible since I use "clickvalue".
... View more
Labels
- Labels:
-
other
