https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172488#M186522 <P>Hi gfuente,</P> <P>Thank you for pointing this out. I will test to see if I can get it to work.</P> <P>Much appreciation,</P> <P>Zusa</P> Mon, 09 Dec 2013 19:59:11 GMT greathera 2013-12-09T19:59:11Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172485#M186519 <P>Hello,<BR /> When my application fails it will generate repeating log lines. I must detect where there are repeating log entries to determine what thread is causing the problem. Each time there is a failure the content of the repeating logs will be different depending on the thread / process that is having the problem. Can Splunk detect a sequence of repeating log entries? How would I do this? I see there is a md5 function and wonder if this can used to generate a hash per log line and then compare each new log entry to the one before it (or the log entry two lines back?).<BR /> Thank you for any help on this.<BR /> Zusa</P> Mon, 09 Dec 2013 16:12:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172485#M186519 greathera 2013-12-09T16:12:44Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172486#M186520 <P>Hello</P> <P>You could use the cluster command:</P> <PRE><CODE><A href="http://docs.splunk.com/Documentation/Splunk/6.0/SearchReference/Cluster" target="test_blank">http://docs.splunk.com/Documentation/Splunk/6.0/SearchReference/Cluster</A> </CODE></PRE> <P>That groups similar events.</P> <P>Regards</P> Mon, 09 Dec 2013 16:16:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172486#M186520 gfuente 2013-12-09T16:16:40Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172487#M186521 <P>Hi gfuente,</P> <P>Thank you for pointing this out. I will test to see if I can get it to work.</P> <P>Much appreciation,</P> <P>Zusa</P> Mon, 09 Dec 2013 19:58:24 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172487#M186521 greathera 2013-12-09T19:58:24Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172488#M186522 <P>Hi gfuente,</P> <P>Thank you for pointing this out. I will test to see if I can get it to work.</P> <P>Much appreciation,</P> <P>Zusa</P> Mon, 09 Dec 2013 19:59:11 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-repeating-log-entries/m-p/172488#M186522 greathera 2013-12-09T19:59:11Z