Splunk Search

Query for Multiple URLs

kvanwagoner
New Member

I'm sure this will be easy for you guys but I"m struggling with it..
I need to modify this query to look for both the http://open/FinalNumbers as well as a URL of https://apicorp.company/open/FinalNumbers

"A GET was made to Open API - Status: OK (http://open/FinalNumbers" | spath AppID | search Environment=prod | timechart count by Environment | bin span=7d _time | stats avg(prod)

Please help!

Tags (3)
0 Karma
1 Solution

jpolvino
Builder

Sounds like you want to OR the URLs:

"A GET was made to Open API - Status: OK (http://open/FinalNumbers" OR "A GET was made to Open API - Status: OK (https://apicorp.company/open/FinalNumbers" | spath AppID | search Environment=prod | timechart count by Environment | bin span=7d _time | stats avg(prod)

Also before the first pipe, you should specify an index and sourcetype at a minimum for efficiency.

View solution in original post

0 Karma

jpolvino
Builder

Sounds like you want to OR the URLs:

"A GET was made to Open API - Status: OK (http://open/FinalNumbers" OR "A GET was made to Open API - Status: OK (https://apicorp.company/open/FinalNumbers" | spath AppID | search Environment=prod | timechart count by Environment | bin span=7d _time | stats avg(prod)

Also before the first pipe, you should specify an index and sourcetype at a minimum for efficiency.

0 Karma

kvanwagoner
New Member

Thanks! That worked!

0 Karma

jpolvino
Builder

Please "accept as answer" the solution that fixes the issue, to help others. Thanks, and glad it worked!

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...