About minhquannguyen7

minhquannguyen7 · ‎09-15-2023

My splunk index have a trouble Total License Usage 90% Near Daily Quota how to solve it pls ?

minhquannguyen7 · ‎07-11-2023

thanks you @santoshneelam ! i want extract in the different log with any field look like this , what shoud i do ???

minhquannguyen7 · ‎07-11-2023

here is field "http_x_forwarded_for="222.xx.xx.xx, 122.211.xx.xx" i have try: | rex field=_raw "http_x_forwarded_for\s*=\s*(?<ip_address>[^,\s]+)" | table ip_address But it not works, pls help !

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎07-11-2023

Online Status	Offline
Date Last Visited	‎09-15-2023 07:48 AM

Splunk Alert: DMC Alert Total License Usage 90% Ne...

How to extract first ip from "http_x_forwarded_for...

Splunk Alert: DMC Alert Total License Usage 90% Ne...

Re: How to extract first ip from "http_x_forwarded...

How to extract first ip from "http_x_forwarded_for...

Join the Conversation

Splunk Alert: DMC Alert Total License Usage 90% Ne...

How to extract first ip from "http_x_forwarded_for...

Splunk Alert: DMC Alert Total License Usage 90% Ne...

Re: How to extract first ip from "http_x_forwarded...

How to extract first ip from "http_x_forwarded_for...