Other Using Splunk

Category Activity

How to send search report to gmail for every hour? HI All, How to send a search report to Gmail for every hour? Following is search query, ..\| stats count(eval(Colo... by uppukumar Explorer in Reporting 03-11-2019 0 1	0	1
how can i count instances of specific value across more than one source? my system executes unique tasks that produce 2 logs - a summary and a raw log. the source naming is something like:... by kelvinmarr New Member in Reporting 03-10-2019 0 5	0	5
Distinct values only in pivot? Why sometimes only distinct values are available in the pivot field settings? How to get all values in this case? by njandieri Explorer in Reporting 03-09-2019 0 0	0	0
How do you customize the look of a scheduled report? Is it possible to customize the look of scheduled reports? I was looking to add a logo/background to customize a repo... by aohls Contributor in Reporting 03-08-2019 0 1	0	1
Encountering a problem in sending email using splunk I have to send an email based on results and my company email doesn't receive the email that I was sending using splu... by marjonhtuazon Explorer in Reporting 03-08-2019 0 2	0	2
Splunk Alerts into trapstation and then into Spectrum Hi, We want to send splunk alerts into trapstation and then into Spectrum, as per splunk docs it doesn't support scr... by niha1318 New Member in Alerting 03-08-2019 0 0	0	0
Collect attachments in email as input. I have an application that is able to output data via attachments in email. I am interested in collecting the data... by JWBailey Communicator in Reporting 03-08-2019 0 4	0	4
how to write and alert for different devices such as laptops and cellphones to see if they are VPNing? how to write and alert for different devices such as laptops and cellphones to see if they are VPNing? by tamtjo New Member in Alerting 03-08-2019 0 2	0	2
how to find response time of end to end requests from logs? {"line":"10.198.125.217 - - [08/Mar/2019:06:07:17 +0000] \"POST /install/Instere/inser/form HTTP/1.1\" 200 485312","s... by varshna New Member in Reporting 03-08-2019 0 1	0	1
If statement wild card Hi All, we need to define internal and external email segregation, we have the field sender and receiver fields . If... by sumitkathpal292 New Member in Reporting 03-07-2019 0 5	0	5
How to send search results of an alert to a script? Hi guys. Here's what I want to do: I made an alert that triggers if a new computer is found. I want to send the res... by kinguchiha New Member in Alerting 03-07-2019 0 1	0	1
What does the Schedule Window option for an Alert mean? I'm not sure what the default 0 option means for the Schedule Window option. by ddrillic Ultra Champion in Alerting 03-07-2019 0 11	0	11
Can this Report be improved - and the Month shown on the x axis At this time if i run this over 4 months the x axis shows Month, day - all i want to see is month. And can this sear... by Skins Path Finder in Reporting 03-07-2019 0 0	0	0
Why am I receiving too many Splunk logs on audit.log? Hi everyone! i logged into my search head and found that the main indexer was at 98% of the total capacity. So i st... by jnahuelperez35 Path Finder in Alerting 03-06-2019 0 5	0	5
How do you get a list of unique users for the month? A beginner here trying to learn SPLUNK... I have some daily log files where users can login and out multiple times ... by Adam_Marx Explorer in Reporting 03-06-2019 0 8	0	8
Alert stopped triggering Have an alert that use to trigger and send an email, the alert details are SEARCH STRING: source="WinEventLog:Securi... by ckeller2791 Explorer in Alerting 03-05-2019 0 2	0	2
Why isn't my splunk alert firing? Hi, I'm using Splunk Enterprise 7.1.1 and I'm having a problem with alerts. I have tried to create an alert for the... by ushumar New Member in Alerting 03-04-2019 0 1	0	1
Splunk alert returns 0 events Hello, I've created an alert which is supposed to trigger when events are less than 25. Sometimes it triggers correc... by warlock2204 New Member in Alerting 03-04-2019 0 5	0	5
escalate an alert to a different email address after some time or a certain frequency of its occurrence Hi, I am new to splunk and working on imitating nagaios's alerting behavior. Specifically, I have created an alert ... by mmaqbool Explorer in Alerting 03-03-2019 0 9	0	9
Is there a way to configure new deployment server a new server only for the purpose of reports and alerts? We have 1 deployment server where data is being forwarded from around 60 forwarders. Lately, we are noticing that the... by pdantuuri0411 Explorer in Alerting 03-02-2019 0 4	0	4
LDAP search to check if account is locked Hi, I am trying to create alert for user locked in LDAP. Is there a way to do so in SPLUNK? I am aware about WINEVE... by bsaujla131984 Path Finder in Alerting 03-01-2019 0 1	0	1
How do I create an alert triggering if a task in task-scheduler fail, or for some reason doesn't start? Have a task on a server that I want to monitor. Can I search for specific event from that server and get an alert if ... by mceye New Member in Alerting 03-01-2019 0 1	0	1
How do I combine 5 searches into a single report to execute a loadjob command from my dashboard? hello, In my dashboard, i use 5 different values from the search below: index="windows" sourcetype="wineventlog:App... by jip31 Motivator in Reporting 03-01-2019 1 3	1	3
Need workaround- Loadjob does not work on ad hoc searches in search cluster We currently use a single search head with an index cluster. I have written a large number of relatively complex dash... by Tedesco1 Path Finder in Reporting 03-01-2019 0 4	0	4
How to get Capacity planning and Availability report in Splunk for servers? How to get Capacity planning and Availability report in Splunk for servers? I wish to get reports on Servers Availa... by ansif Motivator in Reporting 03-01-2019 0 9	0	9