Splunk Search

Community Activity

Match data from items listed in column of csv file I have a .csv file with multiple columns. This is an auto-generated .csv file, and I only need to search against one ... by iomega311 Explorer in Splunk Search 03-08-2018 0 2	0	2
Populating Additional Information on Field Data I'm getting log data from a system that uses codes for each entry and I'd like to replace or add a description of the... by chrisschum Path Finder in Splunk Search 03-08-2018 0 3	0	3
How to Group data by a few factors? Hello, I need to prepare statistics of some events occurrences and this is my data in splunk: 07-03-18;11:55:14;id... by tatery Engager in Splunk Search 03-08-2018 0 12	0	12
Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user? by emichels Loves-to-Learn in Splunk Search 03-08-2018 0 2	0	2
question involving breaking out multiple multivalue fields into events I'm having issues trying to break out individual events that are combined into multi-value fields When I do a table ... by kmaron Motivator in Splunk Search 03-08-2018 0 4	0	4
Why are my dashboard panels using a base search showing no results, but shows results if opened in search? Hi, I've encountered this problem a couple of times now. I have a dashboard where some of the panels run on a base ... by hettervik Builder in Splunk Search 03-08-2018 6 7	6	7
Syslog-help me How can I transfer data from splunk to syslog? I did not understand the explanation in the link: http://docs.splunk.c... by dabany Engager in Splunk Search 03-08-2018 0 1	0	1
Time format and table sorting issues So, I have this search on events that cover from the 28th of February to the 6th of March, 2018: Some basic search... by jwillaime Explorer in Splunk Search 03-07-2018 0 3	0	3
How to display the data for the last 4 weeks by week number? Hi, I want to create dashboard that displays the 4 weeks data by week number. The database normally have 3 months of... by auaave Communicator in Splunk Search 03-07-2018 0 10	0	10
search to find Bush's stolen watch Does anyone know how to craft a search to find George Bush's stolen watch? by ledion Path Finder in Splunk Search 03-07-2018 3 7	3	7
How to add Currency Symbol ($ dollar sign) to a column with numbers? Hi all, I have a column in splunk that I want to use to show totals. I would like for the dollar sign ($) to appear ... by tdunphy_ Explorer in Splunk Search 03-07-2018 0 2	0	2
How to extract name/value pair from XML datasource? I'm asking this question on behalf of a customer. We are ingesting XML data and it comes in clean. Timestamp is bein... by rvoninski_splun Splunk Employee in Splunk Search 03-07-2018 0 8	0	8
How to get average of all the summed values? Hi, I am trying to sum up all the field values grouped by a field value(suppose fieldA) in my initial query and I g... by rakeshyv0807 Explorer in Splunk Search 03-07-2018 0 1	0	1
How do I string certain searches together to get a list of user IP addresses doing a particular query? I have connection logs for a database. I need to identify users making certain queries. I'd like to: Search for a st... by dangerusty Engager in Splunk Search 03-07-2018 0 2	0	2
Deduping max-match on a rex. I've got some data I'm matching with a rex akin to: \| rex max_match=5 field=_raw "(?<myvalue>\d{4})" However, if ... by howyagoin Contributor in Splunk Search 03-07-2018 0 2	0	2
Uploading a bunch of files hi, I want to upload a bunch of files in a splunk i have a zipped file named SP.zip which is containing all the log ... by ChhayaV Communicator in Splunk Search 03-07-2018 0 5	0	5
Join 2 searches on 2 different columns I have 2 searches and i want to join the results of both of them into 1 table of x_requestid's. The respective result... by xiaohenry Explorer in Splunk Search 03-07-2018 0 7	0	7
Why is the Null Queue Not Working? Hello, Here is a sample log event I would like to filter: 20180307 11:11:08.795 [process:flow] [INFO] Thread is ret... by jordanking1992 Path Finder in Splunk Search 03-07-2018 0 3	0	3
Regular expression is not working properly.. Please suggest I need to have the first qualifier of a FQDN string. I have used the below mentioned query to do so. But it's not rec... by rajim Path Finder in Splunk Search 03-07-2018 0 4	0	4
Why is the condition match inside selection not working? Hi Normally have code like this <selection> <set token="time_selection.earliest">$start$</set> ... by robertlynch2020 Influencer in Splunk Search 03-07-2018 0 8	0	8
Setting static Y-Axis range for Timechart used in Glass Table I've created a glass table to display system memory and CPU usage by percent using the Timechart visualization option... by chillsgrove Explorer in Splunk Search 03-07-2018 0 2	0	2
show percentage as a new field Hello All, I have a question for you. We have data where the user want to calculate the number of events that have oc... by ranjitbrhm1 Communicator in Splunk Search 03-07-2018 0 2	0	2
Rex to select number from string Hi All, I am trying to select numbers from a field using Rex, but I cannot seem to figure it out. Basically the val... by abbam Explorer in Splunk Search 03-07-2018 0 5	0	5
How to create top command results in timechart? I'm trying to make a timechart to show percentage of error rates over a given time period. What I am looking for from... by brajaram Communicator in Splunk Search 03-07-2018 0 2	0	2
How to select second date string from email? Currently, our support team is sent an email that reports start and end times for jobs. It comes from an ancient sys... by timrich66 Communicator in Splunk Search 03-07-2018 0 3	0	3