Other Using Splunk

Other Using Splunk
Category Activity
x213217
Hello I have an alert that runs on the Cron expression 00 2-19 * * 2-6 Starts at 2 am - runs Tuesday-Saturday and ru...
by x213217 Explorer in Alerting 05-03-2019
0 1
0
1
massumtaqi
I am trying to limit the events returned or number of alerts triggered at the same time or within 5 seconds if the fi...
by massumtaqi New Member in Alerting 05-03-2019
0 7
0
7
adamsmith47
In a report I'm building, I'm using the | map command to send emails to many recipients, each with their own custom v...
by adamsmith47 Communicator in Alerting 05-03-2019
0 5
0
5
mbagali_splunk
How to use a custom script in alert actions and pass arguments to it when the alert is triggered
by mbagali_splunk Splunk Employee Splunk Employee in Alerting 05-03-2019
0 3
0
3
wailoont
Hi, I have a search query below : sourcetype="XXX" earliest=-1w@w latest=now | rex field=_raw "(?msi)(?<user_login...
by wailoont Engager in Alerting 05-02-2019
0 5
0
5
matstap
I have a report that sends an email with the result data once a day. I only want the report to send an email if the n...
by matstap Communicator in Alerting 05-01-2019
0 5
0
5
pdantuuri0411
Hi, I see that we can add various variables by default in the script for custom alert action like search term, trigg...
by pdantuuri0411 Explorer in Alerting 05-01-2019
0 3
0
3
chalak
Ultimate goal is to find out what is the longest period of time without any event in an index within last month ( and...
by chalak Path Finder in Alerting 05-01-2019
0 4
0
4
rtsquared
In the event that I want to set up an alert on, the value I want to check against is part of the description field. T...
by rtsquared Explorer in Alerting 04-30-2019
0 2
0
2
knalla
Hi, I'm trying to create a alert action to send email to SNOW instance to create a incident. Whats the best way to a...
by knalla Path Finder in Alerting 04-30-2019
0 5
0
5
SathyaNarayanan
Hi, I have 4 different reports which don't have any common field, but the application team want all the reports in s...
by SathyaNarayanan Path Finder in Reporting 04-30-2019
0 5
0
5
mmukherjee
I have created an alert in Splunk which when triggered sends an email to a specified mail id. But sadly, the mail is ...
by mmukherjee Explorer in Reporting 04-30-2019
0 3
0
3
Splunk_rocks
I have following fields in my splunk radioStatus,bitChange,DeviceChange,Temp,Humidity. index=test | table radioStat...
by Splunk_rocks Path Finder in Alerting 04-29-2019
0 5
0
5
rcreddy06
The status of the replication factor and search factor on indexer cluster are fluctuating and would like to set up an...
by rcreddy06 Path Finder in Alerting 04-29-2019
3 12
3
12
YUNHYEONG
Hello, splunker. I have about 50 savedsearch. It's schedule is executed once every 30 minutes and my workstation h...
by YUNHYEONG Explorer in Reporting 04-29-2019
0 4
0
4
ddrillic
We have a report such as - index=<index name> ( URI=<a certain uri> OR URI=<a certain u...
by ddrillic Ultra Champion in Reporting 04-29-2019
0 3
0
3
rajyah
Good day! Is there any possible way to export a statistic table with over 50 fields? We're trying to imitate a repor...
by rajyah Communicator in Reporting 04-28-2019
1 1
1
1
khanlarloo
i want to send alert between 7am to 7 pm from saturday until wednesday and 7am to 14pm on thursday how can i do that...
by khanlarloo Explorer in Alerting 04-28-2019
0 1
0
1
mjones414
In this case I'm using a PBS job scheduler and whenever splunk sees a uncorrectable memory error I want it to offline...
by mjones414 Contributor in Alerting 04-27-2019
0 1
0
1
nick405060
Given a specified n number of csvs, I want to input and append them: | makeresults | eval count=mvrange(0,n,1) | mve...
by nick405060 Motivator in Reporting 04-26-2019
1 3
1
3
andrew207
I have an alert that runs every 1 minute and triggers when latest(status) = stopped. If the alert runs and sees lat...
by andrew207 Path Finder in Alerting 04-25-2019
1 4
1
4
carlyleadmin
Hi Splunk Gurus!!! I have the below query in my environment to find out the seconds it took for the job to complete/...
by carlyleadmin Contributor in Alerting 04-25-2019
0 1
0
1
JoRodriguez
We have a very simple search that looks for a value and if that value is not greater than 0 for ten minutes it sends ...
by JoRodriguez New Member in Alerting 04-25-2019
0 4
0
4
johnsasikumar
Hi i have a query which gives output of _time, message. The message column holds the actual alert message. I have sav...
by johnsasikumar Path Finder in Alerting 04-25-2019
0 1
0
1
bbiswabhusan
Hello all, I have onboarded aws cloudwatchlogs with splunk to monitor security rekated activities. I want to configur...
by bbiswabhusan Explorer in Alerting 04-25-2019
0 0
0
0
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...