0 Votes

Splunk - status of most recent successful connection - Windows
Log In or Register to download the BES file, and more.


  * Results in a "string"/number
Show indented relevance
tuple string items of following texts of lasts "StatusMgr - " of concatenations of lines containing "StatusMgr" whose(it contains "eventType=connect_done") of files whose(name of it as lowercase starts with "metrics.log" AND exists lines of it) of folders "var\log\splunk" of (folder it) of (it as string as trimmed string) of values "InstallLocation" of keys whose(exists values "DisplayName" whose(it as string contains "UniversalForwarder") of it AND exists values whose(it as string as lowercase contains "splunk") of it) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (x64 registries; x32 registries)

Property Details

TitleSplunk - status of most recent successful connection - Windows
DescriptionWARNING: Slow Eval!!!!!
Added by
Last Modified by on 7/26/2016 2:50:17 PM
Counters 0 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.


Relevance Image Sharing:

<a href='https://bigfix.me/cdb/relevance/3017250'><img src='https://bigfix.me/cdb/relevanceimage/3017250?width=400' border='0'></a>
Social Media:
Share this page on Yammer


Log In or Register to leave comments!