About emilynicole73

emilynicole73 · ‎07-23-2019

index="YOURINDEX" |stats count by domain, id.orig_h | sort -count |stats list(domain) as Domain, list(count) as count sum(count) as Total by id.orig_h |sort -total | head 10 So if I change Total to total, I get different results. Which one would be the correct?

emilynicole73 · ‎07-19-2019

How would you change the splunk_server=local to get all user roles across the network?

Posts	2
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎06-25-2019

Online Status	Offline
Date Last Visited	‎12-13-2022 10:29 AM

What is the difference in total and Total?

What is the difference in total and Total?

Re: How can I generate a list of users and assigne...