I have a field called "command" with the below input: C:\windows\systems32\cmd.exe /c ""c:\program Files(x86)\Microsoft. So I want to extract all the special characters and need to get the count of number of times a special character is used..  For example; I want my result to be like this : Special character    Count \                                       5 /                                       1 ""                                      1 (                                         1 )                                          1   How can I get this done?         ... View more

Hello, I've been using Splunk for less than a year and I'm trying to know how to size Splunk deployment(hardware requirement). I've read the Splunk Capacity Planning manual and the admin guides but would like to hear from people who have done it. 1800 clients in the environment 120GB/day(Splunk) So How many indexers and forwarders should I have for this project? as I have 1800 clients and using 120GB a day. Can one server do the job? Also, I am not sure if I should use universal or Heavy forwarder. But it seems like Universal is the right one. I'd appreciate any recommendations. Thanks in advance, George ... View more