Nov 14, 2018 · In the following Splunk search, how can I only show those users that had a count > 1 in any given _time period? GadgetGeek. Path ...

How to search and only return results for users with more than one recorded IP address (src_ip) against their username?

I ran the search below to find search Applications which are not accessed in last 2 months by anyone, but it's instead showing results from now (today's date) ...

Aug 21, 2018 · Sorry for the inconvenience, but I'm looking for a query that only shows the searches typed by users, because when I check in the audit it ...

Learn the basics of searching in Splunk. Use keywords, fields, and booleans to quickly gain insights into your data.

Mar 18, 2022 · Can a search query result that provides more than 1 field be outputted to a file with a command like outputlookup and have its multiple fields ...

Feb 3, 2022 · If this is your need you have two choices: using transaction command: it's slower but easier to use,; using stats command: it's faster but less ...

All community, Knowledge base, mhornste, User Search ... Can you just try to run the following in Search ... Re: How to restrict a search string to show only o...