A community-built SPL + dashboard repository
GoSplunk
Discover field-tested SPL searches and full dashboard XML you can copy straight into Splunk.
Sample SPL
index=security EventCode=4625
| stats count by Account_Name, ComputerName
| sort - count 128
SPL searches
Hand-picked SPL searches from across the library.
Network Traffic Received in Megabytes over Time
Sysmon - cmd line for non -local connections
Security Access granted to an Account
REST Call for a get details about Alert cron_schedules
List Deployment Apps and the associated serverClass
Remediation Tracking Trend - Qualys
Splunk CIM Assist
Search All Traffic by src / action - Creates Table
Splunk Objects With Permissions Granted to Non-existent Roles
Dashboards
Full XML dashboards with panels, inputs, and drilldowns. Copy once, ship instantly.