A community-built SPL + dashboard repository
GoSplunk
Discover field-tested SPL searches and full dashboard XML you can copy straight into Splunk.
Sample SPL
index=security EventCode=4625
| stats count by Account_Name, ComputerName
| sort - count 128
SPL searches
Hand-picked SPL searches from across the library.
Qualys Hosts not Scanned in 30 days+
User Logon, Logoff, and Duration
Event Logs | System Logs | Warnings and Errors
User Activity in DBConnect
List skipped searches by name, reason
Create a lookup with random test ip's
Successful Logons - Windows
Low Disk Space Alert for Windows Servers
List forwarders generating socket errors due to unkown SSL protocol
Dashboards
Full XML dashboards with panels, inputs, and drilldowns. Copy once, ship instantly.