Splunk ITSI and TrackMe integration

splunk logo Splunk datadog logo Datadog new relic logo New Relic snowflake coalesce · concat · constants · env · format · join · json_decode · json_path

coalesce eval remote_host=replace(remote_host, d+$,)

coalesce db2 Using the splunk coalesce command can create a new field with information from both fields and can also insert a value if none exists

splunk coalesce Splunk along with EventID decoding and other useful features Bro Bro PE coalesce