cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
tjones130
Engager
Member since: ‎05-10-2023
‎05-10-2023
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎05-10-2023
Activity Feed
View All

Re: Ingest Action XmlWinEventLog Sourcetype Sample

by in Splunk Search
‎05-10-2023 06:46 AM
‎05-10-2023 06:46 AM
I have tried multiple variations of case-sensitivity, with no luck. The sourcetype that returns when running index=* sourcetype="XmlWinEventLog" is "XmlWinEventLog".    ... View more

Has anyone been able to figure out how to search i...

by in Splunk Search
‎05-10-2023 06:05 AM
1 Karma
‎05-10-2023 06:05 AM
1 Karma
Has anyone been able to figure out how to search indexed XmlWinEventLog sourcetype sample logs in the Ingest Action GUI? The actual search being used uses the |where command which seems to be the issue. index=* OR index=_* sourcetype="XmlWinEventLog" | where sourcetype="XmlWinEventLog" | head 100      ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎05-10-2023 01:24 PM
Karma from
View All