{"blog_title":"hiboma\u306e\u65e5\u8a18","categories":[],"blog_url":"https://hiboma.hatenadiary.jp/","type":"rich","author_url":"https://blog.hatena.ne.jp/hiboma/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fhiboma.hatenadiary.jp%2Fentry%2F2022%2F11%2F28%2F130051\" title=\"Splunk SPL \u30e1\u30e2  - hiboma\u306e\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","description":"\u696d\u52d9\u3067 Splunk \u306e SPL \u3092\u30dd\u30c1\u30dd\u30c1\u89e6\u3063\u3066\u3044\u308b\u306e\u3067 \u30e1\u30e2\u306a\u304b\u306a\u304b\u899a\u3048\u3089\u308c\u306a\u3044\u3002 \u4eca\u56de\u306e\u304a\u984c GitHub Enterprize \u306e Audit \u30ed\u30b0\u3092\u53d6\u308a\u8fbc\u3093\u3067\u3044\u308b Splunk \u304c\u3042\u308b\u306e\u3060\u304c\u3001 \u7279\u5b9a\u306e actor \u3067\u30d5\u30a3\u30eb\u30bf\u30fc\u3059\u308b action \u3067\u30ab\u30a6\u30f3\u30c8\u3092\u3068\u308b \u30ab\u30a6\u30f3\u30c8\u3092 sort (\u6607\u9806) \u3059\u308b \u3092\u3057\u305f\u3044\u3002\u3053\u3093\u306a SPL \u3060\u3063\u305f `github_source` action=* actor=\"hiboma\" | stats count by action | sort -count \u7d50\u679c\u306e\u4f8b \u53c2\u8003 \u30c7\u30fc\u30bf\u3092\u4e26\u3079\u66ff\u3048\u308d\uff01\uff5cSplunk search \u30b3\u30de\u30f3\u30c9\u3067\u30ab\u30b9\u30bf\u30e0\u30bd\u30fc\u30c8\u30aa\u30fc\u30c0\u30fc\u2026","url":"https://hiboma.hatenadiary.jp/entry/2022/11/28/130051","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/h/hiboma/20221128/20221128125754.png","version":"1.0","title":"Splunk SPL \u30e1\u30e2 ","provider_url":"https://hatena.blog","width":"100%","provider_name":"Hatena Blog","author_name":"hiboma","published":"2022-11-28 13:00:51","height":"190"}