I have uploaded a single collection of logs for one time use in Splunk. I was wondering if there is a way to generate just a list of all the IP's listed in that collection? I can get the top IP hits, but I need all the IP's. Is there anyway to do this?
To the end of your base do | dedup IP | table IP
Example would be sourcetype="foo" | dedup IP | table IP