Hi Splunkers I need to extract this log below each SMB Path to make a count: LOG Example: Here are the SMB shares available on the remote host when logged in as "user account" ADMIN$ IPC$ Teste Users I need results came with below : Action = Here are the SMB shares available on the remote host when logged in a User = "user account" Path = ADMIN$ Path = IPC$ Path = Teste Path = Users I tried using regex but I can only bring all path together. Thanks for Help ... View more

Hi Team I have a Qualys Cloud Plataform and I need install app on Splunk, but my Heavy Forwarder is Windows Server. Can I install Qualys TA app in Indexer server ? Thanks ... View more