A community-built SPL + dashboard repository
GoSplunk
Discover field-tested SPL searches and full dashboard XML you can copy straight into Splunk.
Sample SPL
index=security EventCode=4625
| stats count by Account_Name, ComputerName
| sort - count 128
SPL searches
Hand-picked SPL searches from across the library.
DLL Serach Oreder Hijacking (mitre : T1574.001)
Rename _time field in a TimeChart
Average Duration of a Session within an IIS Web Environment
List all fields for an index
Fishies! Fun Query and Easter Egg
File Accesses in a Windows Environment by user
Detailed list of Universal Forwarders Reporting to Indexer
CPU Thresholds, Warnings, and Risk Scoring
Repeated Unsuccessful Logon Attempts in Linux
Dashboards
Full XML dashboards with panels, inputs, and drilldowns. Copy once, ship instantly.