Unusually Long Content-Type Length
This search looks for unusually long strings in the Content-Type http header that the client sends the server.
Unusually Long Content-Type Length Help
This particular search leverages data extracted from Stream:HTTP. You must configure the http stream using the Splunk Stream App on your Splunk Stream deployment server to extract the cscontenttype field.
Open in Search