Splunk Search

Community Activity

Why is Hunk 6.1.1 ignoring 'earliest' and 'latest' in search? I have a vix defined with the following parameters: [mydata] vix.provider = myprovider vix.input.1.path = /user/hunk... by shaskell_splunk Splunk Employee in Splunk Search 04-25-2018 2 6	2	6
How to stop Splunk from recognizing a large number as a (epoch) timestamp? I'm using the map function to do a search on reach row of a table I've created with some IDs that link certain things... by koenV Explorer in Splunk Search 04-25-2018 0 6	0	6
How to categorize count results by country I have the following code from a web log, which gives me a table of the Time (by minute) the total for that minute, a... by parwindertaank Explorer in Splunk Search 04-25-2018 0 2	0	2
How to separate query result by country I have the following which provides me the total number of events for each minute and the predicted value as well as ... by parwindertaank Explorer in Splunk Search 04-25-2018 0 5	0	5
Read timezone from openvas logs? Regex, strftime, won't detect it. I'm inputting openvas logs into splunk. Works great for .messages, not so much for .log files. Below is how the lines... by JSkier Communicator in Splunk Search 04-25-2018 0 3	0	3
Is it possible to change the IP address to the name of the switch? We send syslog direct from switches to the Splunk indexer. Is it possible to change the IP address to the name of the... by chrisitanmoleck Path Finder in Splunk Search 04-25-2018 0 5	0	5
How do I extract multiple events from one event using SPL? I have data that represents values on bidirectional connections for a graph structure. For example, each event has f... by danwilson Explorer in Splunk Search 04-25-2018 0 2	0	2
CSV files limitation Is there a limit associated with csv file for indexing on forwarder. i find many of the csv files are skipping indexi... by jiaqya Builder in Splunk Search 04-25-2018 0 3	0	3
Match url from lookup file to the webgateway access logs and return matched URL as a output result Hello Team, We have a lookup file containing multiple columns, one column contains a list of URL's having column nam... by etric New Member in Splunk Search 04-25-2018 0 6	0	6
Multisearch Is there a way to have if you extract data from a search to have it fun in another search? Like putting the field val... by HealyManTech Explorer in Splunk Search 04-25-2018 0 3	0	3
Search dont work Hi, I want to show the number of all my downloads with a Splunk search, but the search shows never all downloads how... by cesarb Path Finder in Splunk Search 04-25-2018 0 18	0	18
how to show date in splunk dashboard panel title or label Hi, How to show the last indexed file's date in the panel title or label in splunk dashboard. the input lookup file... by surekhasplunk Communicator in Splunk Search 04-25-2018 0 6	0	6
DB Connect 3.1.1 Data Duplication? Using DBXv3.1.1 I'm seeing many cases of duplicate data being indexed despite the data being inputted from a single s... by matthewsenour Explorer in Splunk Search 04-25-2018 0 11	0	11
Sum up values into a row with the data grouped by fields I have the below sample data Groups Values G1 1 G1 2 G1 1 G1 2 G3 3 G3 3 G3 3 I am looking to sum up the... by madakkas Explorer in Splunk Search 04-24-2018 0 4	0	4
"Explain" type function Is there any concept called "Explain" type function in Splunk for searching queries? by akarivaratharaj Communicator in Splunk Search 04-24-2018 0 2	0	2
How to create a field with more complicated values to be extracted? I want to extract the text in square brackets to create it as a field. However like my previous problem I had the fie... by gilbxrtx_7 New Member in Splunk Search 04-24-2018 0 9	0	9
reverse axes I have a Splunk query that returns the duration of each service call, and I want to plot each value on the y-axis, an... by jbrenner Path Finder in Splunk Search 04-24-2018 0 3	0	3
Extract data from a string that has variable length Hi I have the below data , and am trying to extract the below Start lsakjdf sdlkj sd CODE=CODE1 ksdjf ksajfd sakjdf ... by madakkas Explorer in Splunk Search 04-24-2018 0 4	0	4
how to stop splunk from editing files in /opt/splunk/etc/system/local/ directory? We want to stop splunk from editing the files inside $SPLUNKHOME/etc/system/local, for example its adds sslKeysPasswo... by neovenkat Explorer in Splunk Search 04-24-2018 0 3	0	3
Use double eval function for an extracted field Hi All, I have extracted a field from my raw data using eval replace function. Now I want to use the eval split func... by soumyacharya91 Path Finder in Splunk Search 04-24-2018 0 2	0	2
predict command doesent work Hi I want to predict values of a field over time. the result table of my search: In the end of the search I use: ... by matansocher Contributor in Splunk Search 04-24-2018 0 5	0	5
Alert based on comparison between two results of the same search I have the WinHostMon service reporting in every 5 minutes. I want to be alerted if a State changes from one 5 minute... by JordanPeterson Path Finder in Splunk Search 04-24-2018 0 1	0	1
How to compare two dates in format DAY-Mon dd:mm:ss ZZZZ YYYY ? Hello, I have two dates which I need to compare and report if there is difference of more than 1 hour currTime = T... by jagdeepgupta813 Explorer in Splunk Search 04-24-2018 0 2	0	2
How to search and extract values from multiple sourcetypes? Hi Everyone, I am trying to check a certain a ticket-series in Sourcetype_A or Sourcetype_B. If found, I need to che... by Chandras11 Communicator in Splunk Search 04-24-2018 0 7	0	7
How to update my case statement to preserve original field contents Hello Splunk experts, Not sure if I'm going about this the right way, but I'd like to store contents of multiple fie... by splunker1981 Path Finder in Splunk Search 04-24-2018 0 1	0	1