{
    "displayName": "[Search Splunk - General (IP and hostname)]",
    "cssClasses": [
        "ip-src",
        "ip-dst",
        "alias-host",
        "ip.src",
        "ip.dst",
        "alias.host"
    ],
    "description": "Splunk search General",
    "type": "UAP.common.contextmenu.actions.URLContextAction",
    "version": "Custom",
    "modules": [
        "investigation"
    ],
    "local": "false",
    "groupName": "externalLookupGroup",
    "urlFormat": "http://SPLUNKIP:8000/en-US/app/search/search?q=search%20{0}&earliest=-30d&latest=now",
    "disabled": "",
    "id": "SplunkLogLookupGeneral",
    "moduleClasses": [
        "UAP.investigation.navigate.view.NavigationPanel",
        "UAP.investigation.events.view.EventGrid"
    ],
    "openInNewTab": "true"
}


{
    "displayName": "[Search Splunk - Destination IP]",
    "cssClasses": [
         "ip-dst",
         "ip.dst"
    ],
    "description": "Splunk search Destination IP",
    "type": "UAP.common.contextmenu.actions.URLContextAction",
    "version": "Custom",
    "modules": [
        "investigation"
    ],
    "local": "false",
    "groupName": "externalLookupGroup",
    "urlFormat": "http://SPLUNKIP:8000/en-US/app/search/search?q=search%20dest%3D{0}&earliest=-30d&latest=now",
    "disabled": "",
    "id": "SplunkLogLookupDest",
    "moduleClasses": [
        "UAP.investigation.navigate.view.NavigationPanel",
        "UAP.investigation.events.view.EventGrid"
    ],
    "openInNewTab": "true"
}


{
    "displayName": "[Search Splunk - Source IP]",
    "cssClasses": [
         "ip-src",
         "ip.src"
    ],
    "description": "Splunk search Source IP",
    "type": "UAP.common.contextmenu.actions.URLContextAction",
    "version": "Custom",
    "modules": [
        "investigation"
    ],
    "local": "false",
    "groupName": "externalLookupGroup",
    "urlFormat": "http://SPLUNKUP:8000/en-US/app/search/search?q=search%20src%3D{0}&earliest=-30d&latest=now",
    "disabled": "",
    "id": "SplunkLogLookupSrc",
    "moduleClasses": [
        "UAP.investigation.navigate.view.NavigationPanel",
        "UAP.investigation.events.view.EventGrid"
    ],
    "openInNewTab": "true"
}


{
    "displayName": "[Search Splunk - Hostname]",
    "cssClasses": [
         "alias-host",
         "alias.host"
    ],
    "description": "Splunk search Hostname",
    "type": "UAP.common.contextmenu.actions.URLContextAction",
    "version": "Custom",
    "modules": [
        "investigation"
    ],
    "local": "false",
    "groupName": "externalLookupGroup",
    "urlFormat": "http://SPLUNKIP:8000/en-US/app/search/search?q=search%20hostname%3D{0}&earliest=-30d&latest=now",
    "disabled": "",
    "id": "SplunkLogLookupHostname",
    "moduleClasses": [
        "UAP.investigation.navigate.view.NavigationPanel",
        "UAP.investigation.events.view.EventGrid"
    ],
    "openInNewTab": "true"
}