Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About bnybln030
bnybln030
Engager
Member since:
02-22-2022
03-11-2022
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 02-22-2022 |
Activity Feed
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 09:56 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 03:03 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 02:57 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 02:33 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 01:25 AM
- Posted Re: Field extraction with regex for Nmap result on Splunk Search. 03-11-2022 01:01 AM
- Posted How do I extract this field with regex for Nmap result? on Splunk Search. 03-11-2022 12:36 AM
- Karma Re: Minimaze and Maximize a Cell or Drilldown and short the Text in Zell for gcusello. 02-22-2022 06:34 AM
- Posted Re: Minimaze and Maximize a Cell or Drilldown and short the Text in Zell on Splunk Search. 02-22-2022 06:19 AM
- Posted Minimaze and Maximize a Cell or Drilldown and short the Text in Zell on Splunk Search. 02-22-2022 06:02 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-11-2022
09:56 AM
You are right, on my screenshot you see the complete search. With "max_match=0" i get the right results: test5.png If I dont set "max_match=0" then I get exactly the same result as with field extractor: test6.png
... View more
03-11-2022
02:57 AM
I see in the field extractor that only the first entry is recognized.... test4.png
... View more
03-11-2022
02:33 AM
Yes, some of my events contain all 19 MAC algorithms but not all. Some of these algorithms only occur occasionally in other events. I try your search and it looks okay: test3.png
... View more
03-11-2022
01:25 AM
Here is now a picture from field extration in splunk. It is the same result like my search.... test2.png
... View more
03-11-2022
01:01 AM
The problem is that not all values are found in splunk. I only see 8 but in the example on regex101 there are 19 different ones. Here you can see my result: test.png
... View more
03-11-2022
12:36 AM
Hi i want to extract the mac_algorithms field with regex from a nmap scan result. Does anyone have an idea how it works best? I've tried a few things, not all fields are found in Splunk.
Here you can see my example: https://regex101.com/r/eJ16fA/1
Here my nmap-scanning example:
kex_algorithms: (8) [email protected] ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group-exchange-sha1 diffie-hellman-group14-sha1 diffie-hellman-group1-sha1 server_host_key_algorithms: (4) ssh-rsa ssh-dss ecdsa-sha2-nistp256 ssh-ed25519 encryption_algorithms: (14) aes128-ctr aes192-ctr aes256-ctr arcfour256 arcfour128 [email protected] aes128-cbc 3des-cbc blowfish-cbc cast128-cbc aes192-cbc aes256-cbc arcfour [email protected] mac_algorithms: (19) [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] hmac-md5 hmac-sha1 [email protected] [email protected] hmac-sha2-256 hmac-sha2-512 hmac-ripemd160 [email protected] hmac-sha1-96 hmac-md5-96 compression_algorithms: (2) none [email protected]"
... View more
Labels
- Labels:
-
field extraction
-
regex
02-22-2022
06:19 AM
Hi Guiseppe, thanks for your fast reply. Can u say me, what is the best way to drilldown the colum and open a new panel containing the full field? Kind Regadrs bnybln030
... View more
02-22-2022
06:02 AM
Hi everyone, i have in a table the result of a scanning script. Of course, the cells are much too large. Is there a way to minimize them and maximize them if necessary? A drill down to a new page would be also ok, but how can I shorten or change the text in the cell so that the drilldown function is still possible since I use "clickvalue".
... View more
