Other Using Splunk

Category Activity

Is there a way to search where 4 letters in FieldA NotMatch FieldB? Hi Guys, So if I have two fields with really random set of text, no similarities except the red text. Does have the ... by aikn061 Explorer in Alerting 11-18-2022 0 4	0	4
Trigger alert not seen as email notification for some events? on 11th October we had 5 events, but we received only 2 email notification. Below the 5 events of the alert for Yes... by Veeru Path Finder in Reporting 11-18-2022 0 3	0	3
ITSI CustomGroupActionBase get_group() result We are creating a custom action when an itsi event happens based on the CustomGroupActionBase as documenten here. How... by sboogaar Path Finder in Alerting 11-18-2022 0 0	0	0
Where could I start digging to find out why my Search Head Cluster is skipping so many searches? Where could I start digging to find out why my Search Head Cluster is skipping so many searches? I want to find out w... by JDukeSplunk Builder in Reporting 11-17-2022 2 5	2	5
How to include search start and end date of the search in email subject? Hi all I would like to include the start and end date of my search in the email subject. For example, 'The results fr... by tomasz Engager in Reporting 11-17-2022 0 3	0	3
How can I delete option for alerts? Hi team I have created a user and set up capabilities however I haven't checked any delete in capabilities. When I c... by Atchyuth_P Path Finder in Alerting 11-17-2022 0 4	0	4
How to compare these two lookups and get the values that are not in the lookup2 (b,c,d)? Hi Splunkers,I have two lookups where having a common field "values"For example:lookup 1 lookup 2values ... by revanthammineni Path Finder in Reporting 11-16-2022 0 1	0	1
How to read only the first value to make a report? Hi, I have an xml response in the below format. I'm trying to read the BusinessId value of this. Since there are mult... by nmarun Explorer in Reporting 11-16-2022 0 7	0	7
How can I convert Dashboard with different panels to saved search? I have a dashboard with different panels, I would like to convert to a savedsearch. This accomplishes two things: Bet... by Gordon1 Explorer in Reporting 11-15-2022 0 2	0	2
How to resolve error: command="sendemail", [Errno -2] Name or service not known while sending mail to: user@domain.com Hi, I'm getting error when trying to send email. command="sendemail", [Errno -2] Name or service not known while send... by anvesh_kumar33 Observer in Reporting 11-15-2022 0 0	0	0
How to compare two different tables in two different indexes and show unique values? index A has table1 and Index B has table2 table1 table2. table3 aaa. zzz. aaa bbb. aaa. ... by directtv999 Loves-to-Learn Lots in Reporting 11-14-2022 0 3	0	3
Weekend Alerts not working Hi there,I used to have a couple of alerts which worked using a crons expression from Monday to Saturday (/15 7-19 ... by vishalduttauk Communicator in Alerting 11-14-2022 0 2	0	2
How to extract data in xml data format? I need to extract fields from log which is in xml format.Below is the example:<Event> <DateTime>2022-11-10T11:58:41.1... by vineela Path Finder in Alerting 11-14-2022 0 2	0	2
Why was the false alert triggered? Hi Folks, I can't see what would have caused the false alert to triggered: when I checked this directory I can see pl... by majilan1 Path Finder in Alerting 11-14-2022 0 1	0	1
Alert search window needs to be longer than Alert time range getting duplicate events- How can I resolve this? I know this seems obvious I'm searching 5 minutes back and alerting on the results every 1 minute so there is 4 minut... by matt_mrcooper New Member in Alerting 11-08-2022 0 1	0	1
Export pdf vs schedule pdf delivery custom variables My dashboard uses custom variables to fill in dates in the section headers. When I export as a PDF from the UI it wor... by pmdba Builder in Reporting 11-08-2022 0 0	0	0
Why are my Alerts not working? I created an alert on scheduled job whenever the count is greater than 1. It is supposed to trigger an alert but it i... by Nehal259 New Member in Alerting 11-08-2022 0 2	0	2
Splunk dashboard performance issue- Which one is better for performance tuning? Hi Team, kindly let us know which one is better for performance tuning. Dashboard taking so much time to load. inde... by supraja Path Finder in Reporting 11-07-2022 0 2	0	2
How to create an overlay of the avg number of blocks over total sessions? I am trying to create a timechart overlay of blocked traffic comparted to total traffic with the following search: \|... by jwalzerpitt Influencer in Reporting 11-07-2022 0 0	0	0
Suggestions to write an alert if event B occurs without event A? Hello Splunkers! I have an event A from source A and event B from source B. I need an alert when event B occurs witho... by sarahnazzar Explorer in Alerting 11-05-2022 0 11	0	11
How to create a splunk alert if the user login to splunk via local credential using Splunk login type? Hi, We have 2 Splunk authentication systems - SAML,Splunk (default). We wanted to have an alert, if the user login t... by mala_fmr Engager in Alerting 11-04-2022 0 2	0	2
How to filter a pivot by values on a lookup table? Hello! I have a lookup in the csv format of about 1900 users. I have a panel in which we show application usage for e... by cheddargt Loves-to-Learn in Reporting 11-03-2022 0 0	0	0
How to write a search leveraging tstats, a data model, and timechart? I am looking to convert this regular search:index=foo action=blocked `macro` src_zone=foo \| timechart count span=1d o... by jwalzerpitt Influencer in Reporting 11-03-2022 0 5	0	5
Is it possible to export CSV results to network drive? I have a request from one of our service managers about getting a inventory of all hosts logging into Splunk. Using t... by crsplunkr Loves-to-Learn Everything in Reporting 11-03-2022 0 1	0	1
Can a search using dbxquery be saved as an alert? Hi,I'm fairly new to Splunk and am considering using Splunk DB Connect to connect to one of our databases to monitor ... by dmartin Engager in Alerting 11-03-2022 0 2	0	2