1 / 30
Splunk Search History - 8qatrgt
2 / 30
Splunk Search History - 887rt7g
3 / 30
Splunk Search History - 15xw4zx
4 / 30
Splunk Search History - qgtp7we
5 / 30
Splunk Search History - no26h7h
6 / 30
Splunk Search History - 75n2f3i
7 / 30
Splunk Search History - 0wn1vpc
8 / 30
Splunk Search History - ykdmqq8
9 / 30
Splunk Search History - 56oj8hx
10 / 30
Splunk Search History - guwatwk
11 / 30
Splunk Search History - bh3ggaa
12 / 30
Splunk Search History - yrhh69w
13 / 30
Splunk Search History - 6ua91mu
14 / 30
Splunk Search History - 2axt4nb
15 / 30
Splunk Search History - see71o1
16 / 30
Splunk Search History - 9vixyi9
17 / 30
Splunk Search History - zqps698
18 / 30
Splunk Search History - 1om99nm
19 / 30
Splunk Search History - x6jq9d4
20 / 30
Splunk Search History - 2ximtpo
21 / 30
Splunk Search History - du7ezsj
22 / 30
Splunk Search History - bg02v3i
23 / 30
Splunk Search History - ildlxaq
24 / 30
Splunk Search History - 57vv4i8
25 / 30
Splunk Search History - lqq3dcl
26 / 30
Splunk Search History - sv1dh2w
27 / 30
Splunk Search History - bvvoz99
28 / 30
Splunk Search History - 4frsjso
29 / 30
Splunk Search History - a3bt6lf
30 / 30
Splunk Search History - 19pxt4h


Feb 15, 2024聽路 looking at the provenance field in the search i found that only fields containing the value ui:search were related to actual search queries.