Skip to content

Instantly share code, notes, and snippets.

@Sam-Martin

Sam-Martin/IIS

Last active August 1, 2016 13:53
Show Gist options
  • Save Sam-Martin/d58c448f851eaef6303bd8f26ab543e5 to your computer and use it in GitHub Desktop.
Save Sam-Martin/d58c448f851eaef6303bd8f26ab543e5 to your computer and use it in GitHub Desktop.
Download ZIP
Useful Splunk Queries
Raw
IIS
# Show requests from IE on XP
index=* AND cs_User_Agent=*| eval windows_xp_and_ie=if(match(cs_User_Agent,".*MSIE.*5.1.*"),"TRUE","FALSE") | stats count by windows_xp_and_ie
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment