{"id":153,"date":"2026-01-06T10:47:51","date_gmt":"2026-01-06T10:47:51","guid":{"rendered":"http:\/\/securitylearning.ir\/?post_type=knowledgebase&#038;p=153"},"modified":"2026-03-17T22:06:04","modified_gmt":"2026-03-17T22:06:04","slug":"%d8%ac%d8%b3%d8%aa%d8%ac%d9%88-%d9%87%d8%a7%db%8c-%da%a9%d8%a7%d8%b1%d8%a8%d8%b1%d8%a7%d9%86","status":"publish","type":"knowledgebase","link":"https:\/\/securitylearning.ir\/index.php\/knowledge-base\/splunk\/%d8%ac%d8%b3%d8%aa%d8%ac%d9%88-%d9%87%d8%a7%db%8c-%da%a9%d8%a7%d8%b1%d8%a8%d8%b1%d8%a7%d9%86\/","title":{"rendered":"\u062c\u0633\u062a\u062c\u0648 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u062d\u062c\u0645 \u0645\u0635\u0631\u0641 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a"},"content":{"rendered":"\n<p><code>| dedup srcip<br>| table srcip<\/code><\/p>\n\n\n\n<p class=\"has-text-align-right\"><bdo lang=\"\" dir=\"rtl\">\u0628\u0631\u0627\u06cc \u062f\u06cc\u062f\u0646 \u0627\u06cc\u067e\u06cc \u0647\u0627\u06cc \u06cc\u0648\u0646\u06cc\u06a9 \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u062e\u0631\u0648\u062c\u06cc<\/bdo><\/p>\n\n\n\n<p class=\"has-text-align-left\"><code>| stats sum(sentbyte) AS sent_bytes sum(rcvdbyte) AS received_bytes BY srcip<br>| eval total_MB=round((sent_bytes+received_bytes)\/1024\/1024,2)<br>| sort - total_MB<\/code><\/p>\n\n\n\n<p class=\"has-text-align-right\"><bdo lang=\"\" dir=\"rtl\">\u0628\u0631\u0627\u06cc \u062f\u06cc\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0645\u0635\u0631\u0641 \u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646<\/bdo><\/p>\n\n\n\n<p class=\"has-text-align-left\"><code>index=main devname=\"FW-Main-Off\" policyname=\"Wifi Net To Internet Traffic Shaper\" | stats sum(sentbyte) AS sent_bytes sum(rcvdbyte) AS received_bytes BY srcip<br>| eval total_MB=round((sent_bytes+received_bytes)\/1024\/1024,2)<br>| sort - total_MB<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>| dedup srcip| table srcip \u0628\u0631\u0627\u06cc \u062f\u06cc\u062f\u0646 \u0627\u06cc\u067e\u06cc \u0647\u0627\u06cc \u06cc\u0648\u0646\u06cc\u06a9 \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u062e\u0631\u0648\u062c\u06cc | stats sum(sentbyte) AS sent_bytes sum(rcvdbyte) AS received_bytes BY srcip| eval total_MB=round((sent_bytes+received_bytes)\/1024\/1024,2)| sort &#8211; total_MB \u0628\u0631\u0627\u06cc \u062f\u06cc\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0645\u0635\u0631\u0641 \u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 index=main devname=&#8221;FW-Main-Off&#8221; policyname=&#8221;Wifi Net To Internet Traffic Shaper&#8221; | stats sum(sentbyte) AS sent_bytes sum(rcvdbyte) AS received_bytes BY srcip| eval total_MB=round((sent_bytes+received_bytes)\/1024\/1024,2)| [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","template":"","knowledgebase_cat":[18],"class_list":["post-153","knowledgebase","type-knowledgebase","status-publish","hentry","knowledgebase_cat-splunk"],"_links":{"self":[{"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/knowledgebase\/153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/types\/knowledgebase"}],"author":[{"embeddable":true,"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/comments?post=153"}],"version-history":[{"count":3,"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/knowledgebase\/153\/revisions"}],"predecessor-version":[{"id":310,"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/knowledgebase\/153\/revisions\/310"}],"wp:attachment":[{"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/media?parent=153"}],"wp:term":[{"taxonomy":"knowledgebase_cat","embeddable":true,"href":"https:\/\/securitylearning.ir\/index.php\/wp-json\/wp\/v2\/knowledgebase_cat?post=153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}