Splunk query to group URI request by first three IP address octets

We needed this to understand the source of a large influx of requests for a given URI pattern. import splunklib.client as client import splunklib.results as results service = client.connect(host="*******",port="8089",username="showard",password="************") job = """ search host=\"cmhlpecomweb*\" sourcetype=access_combined karlie-kloss | eval temp=split(_raw,\"\t\") |…