Splunk Search

Community Activity

	implement excel countif function in Splunk Hi All, Following is my source table (pelase consider the first 2 fields:- Value and Root_Value only):- I want to ... by Chandras11 Communicator in Splunk Search 04-19-2018 0 1	0	1
	Post process search I have two searches I have a dashboard with two panels. 1st panel has a query search1 join type=outer[search 2 ] ... by akhil36109 New Member in Splunk Search 04-18-2018 0 4	0	4
	Timechart/chart for getting the count of events with specified field value Hi , I want a graph which actually gives me a ratio of count of events by host grouped together in a 15 minute inter... by macadminrohit Contributor in Splunk Search 04-18-2018 0 3	0	3
	Where with subsearch Hi All, I am trying correlate 2 different search queries using where with subsearch it goes like this: host="host1... by nkankur Path Finder in Splunk Search 04-18-2018 0 2	0	2
	How do I edit my rex search to extract a string between two other strings from a sample line of data? Hi, How do I get "x868686@test.com" between "Account:" and "Source Workstation:" from following text: Account: x86... by chlily New Member in Splunk Search 04-18-2018 0 4	0	4
	How to Parse a complicated Field Hello, I have a JSON file with a huge field: It looks like '"outputs": [ { "custom_descriptio... by talal234 Explorer in Splunk Search 04-18-2018 0 8	0	8
	How to add a field to an event, based on a field from another event. I feel like I'm having a brain dead moment. I've been scratching my head over this one... Essentially, I want to per... by adamsmith47 Communicator in Splunk Search 04-18-2018 0 1	0	1
	extract text between two slashes from the end hi I am trying to extract the email id from the text eg: PUT /api/users/usernames/eejuy.alves92%40gmail.com/ PUT /api... by sravani27 Path Finder in Splunk Search 04-18-2018 0 2	0	2
	How to convert String values into factor variable? I have string fields; an example is "URL". I want it to convert it to numeric / factor variable to perform statisti... by zacksoft Contributor in Splunk Search 04-18-2018 0 10	0	10
	timechart return 0 if no results found Hi . I have a sourcetype = Queue and i'm sending the number of messages waiting in the queue . index=monitoring so... by amitdaniel Explorer in Splunk Search 04-18-2018 0 4	0	4
	What is causing the Rex Raw c-ip syntax error? Hi, I'm getting error at search time: Error in 'rex' command: Encountered the following error while compiling the r... by brdr Contributor in Splunk Search 04-18-2018 0 4	0	4
	How does Splunk log keyword pair extraction overwrites field value unintentionally? I have a log of the form <timestamp> field1 field2 field3 field4 urlfield .... For example: <timestamp> fie... by burwell SplunkTrust in Splunk Search 04-18-2018 0 3	0	3
	Problem in time query Hello everyone, i have this search that uses time range picker and my specific time range is 01/07/2018 to 01/13/201... by ygdrassil Engager in Splunk Search 04-18-2018 0 2	0	2
	how to assemble 2 distinct splunk searches into one? hello everyone, I just want to merge the 2 splunk searches. In the first query, i have all information about mounti... by amir_thales Path Finder in Splunk Search 04-18-2018 0 19	0	19
	How can we get the Public IP details with Splunk Cloud? Hello, We are in the process of integrating Splunk with Netcool event management tool.Here we are trying to POST the... by Splunking18 New Member in Splunk Search 04-18-2018 0 2	0	2
	Why some of the field values are missing after stats and chart command? Hi Guys, When I run the below query, it only returns the eventHour up to 14 (2pm) when there are events up to eventH... by auaave Communicator in Splunk Search 04-17-2018 0 2	0	2
	how to make lookup fields as static and the results as dynamic from the search query Hi I am having some of the fields in my lookup file (csv file). And I want list down the lookup fields along with the... by Kwip Contributor in Splunk Search 04-17-2018 0 8	0	8
	How to calculate processing rate of metrics within specified time range? Here's an example snippet of the logs I'm working with: 2018-04-17 18:26:02 app=test-app, env=qa, total_msg=0 2018-0... by hippe21 Explorer in Splunk Search 04-17-2018 0 2	0	2
	How to not automatically invoke the spath command in raw data? Hi, We are using JSON data and the field extractions are done already. So we no need to use the spath command. But ... by nawazns5038 Builder in Splunk Search 04-17-2018 0 7	0	7
	Field data from fieldname in variable Any way of achieving this: \| makeresults \| eval Column1="MyData" \| eval TestField="Column1" \| eval Result{TestField... by auradk Path Finder in Splunk Search 04-17-2018 0 2	0	2
	Comparison of Field values I have a JSON which has something like this "Current Free Space","value":"240 KB", i am parsing out the field name wh... by macadminrohit Contributor in Splunk Search 04-17-2018 0 3	0	3
	How to remove overlapping address ranges from a field of address ranges? I have a field of address ranges where i want to dedup any that overlap. For example: 10.10.20.0/23 10.10.20.160/27 1... by cofisher New Member in Splunk Search 04-17-2018 0 2	0	2
	How to send email to different groups based on the criteria? I would like to send emails to different groups based on number of events returned for a search. Query: index=xyz ... by kollachandra Path Finder in Splunk Search 04-17-2018 0 2	0	2
	How to use results of one data set to identify outliers of another data set? Hi, I have the average and standard deviation of a particular data set and I want to build a confidence interval fro... by parwindertaank Explorer in Splunk Search 04-17-2018 0 2	0	2
	Adapting a search to use timechart Hello: I have the following search: index=M sourcetype="n" name="M*" \|dedup host-ip, plugin_name, plugin_family, se... by atenciodeyka New Member in Splunk Search 04-17-2018 0 2	0	2