Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About karishmajain
karishmajain
Loves-to-Learn Lots
Member since:
03-14-2022
Tuesday
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 03-14-2022 |
Activity Feed
- Posted Re: Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index on Splunk Search. Tuesday
- Posted Re: Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index on Splunk Search. Tuesday
- Posted Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index on Splunk Search. a week ago
- Posted Re: splunk query for list of servers which are sending data in last 14 days from the lookup and not sending in last 7 da on Dashboards & Visualizations. 03-14-2022 08:03 AM
- Posted Re: splunk query for list of servers which are sending data in last 14 days from the lookup and not sending in last 7 da on Dashboards & Visualizations. 03-14-2022 07:24 AM
- Posted Re: splunk query for list of servers which are sending data in last 14 days from the lookup and not sending in last 7 da on Dashboards & Visualizations. 03-14-2022 04:05 AM
- Posted Re: splunk query for list of servers which are sending data in last 14 days from the lookup and not sending in last 7 da on Dashboards & Visualizations. 03-14-2022 03:39 AM
- Posted Re: splunk query for list of servers which are sending data in last 14 days from the lookup and not sending in last 7 da on Dashboards & Visualizations. 03-14-2022 02:27 AM
- Posted How to create search for list of servers sending data in last 14 days from the lookup and not sending in last 7 days on Dashboards & Visualizations. 03-14-2022 01:38 AM
Topics I've Started
Tuesday
please disregard previous question could you please exact spl and sourcetype for calculating mttd
... View more
a week ago
Hi Splunk Community, I’m looking for guidance on implementing an accurate Mean Time to Detect (MTTD) calculation for our SOC dashboard using Splunk Enterprise Security. Currently, we are using the index=notable to retrieve notable events generated by correlation searches. My objective is to calculate: MTTD = Average (Detection Timestamp - First Occurrence Timestamp) However, I’m facing a few challenges: The orig_time field in the notable index is returning the same value as _time.
... View more
Labels
- Labels:
-
stats
03-14-2022
08:03 AM
Got the required result by if (now()- _time<604800.... Thanks
... View more
03-14-2022
07:24 AM
is above query will give the list of all transmitted in 2 weeks .....need only those which are not triggering in last 7 days but triggering in 15 days....
... View more
03-14-2022
04:05 AM
Yes I renamed the field previously ..still no results ... It's absolutely fine .
... View more
03-14-2022
03:39 AM
Thanks so much for your help and input...not getting any result may be the case there is no such server(host)....thanks again for your help and time.
... View more
03-14-2022
02:27 AM
Thanks for your input. I mean I have a csv file which has the list of servers ....from that inputlookup table I need to get the list of servers sending data in last 14 days but not in 7 days..could you please help me in that.. Thanks
... View more
03-14-2022
01:38 AM
Hi Team,
Could you help me with the complete splunk query for list of servers which are sending data in last 14 days from the lookup and not sending in last 7 days
if we write....
| eval day=if(_time<relative_time(now(),"-7d@d"),"sentdatalastweek","didnotsenddatainthelast7days")
what does that mean?
Regards
... View more
Labels
- Labels:
-
table
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Tuesday
|
