Splunk Search

Community Activity

How can I show the total count as well as completed count? If I have to show that 8 out of 10 tickets have been closed how can I best show this? I need to show the total count ... by akshaypillai Engager in Splunk Search 02-22-2018 0 2	0	2
How do you find the same field values but are in two different fields? I am trying to run a search to find the same field values will give me some results. An example would be if I wanted ... by HealyManTech Explorer in Splunk Search 02-22-2018 0 3	0	3
Why is the Eval on an extracted field explodes number of scanned events? Hello everyone, Here is a wierd case i just faced. In a props.conf file (on the search head), i extract some fields ... by dancoisneth Engager in Splunk Search 02-22-2018 0 0	0	0
realtime alert for each event when reaching x number in y mins I am trying to configure a real time alert that will fire off one alert for each event found in a search. I want one... by jdinze New Member in Splunk Search 02-22-2018 0 3	0	3
What is the best way to get regex sed to remove any words with numbers? Trying to get ideas on the best efficient/simple rex mode=sed to replace any words with a number(s). Examples of w... by subtrakt Contributor in Splunk Search 02-22-2018 0 3	0	3
How to create a table from nested JSON keys with different names? Part of my json event looks like this: 1. "certificatecache":[ 2. {"type":"cacheSize","int32value":"10"}, 3. {"type"... by DenysB New Member in Splunk Search 02-22-2018 0 10	0	10
Grouping in the where clause I'm needing to use multiple AND's and OR's in my where clause and the way I'm writing it is giving me inconsistent re... by cliffennis New Member in Splunk Search 02-22-2018 0 2	0	2
How do I highlight just a line from the event? I have a event as below, and I want to highlight the entire line "Message: Processing - UnAuthenticated User". Mess... by abhinandan_rang New Member in Splunk Search 02-22-2018 0 7	0	7
How to get the list of unique exceptions which are occurring only today but not in the past? I am trying this command but looks like its displaying all the exceptions. please let me know how to get the exceptio... by guru89044 Explorer in Splunk Search 02-21-2018 0 6	0	6
How to find the 3rd/Nth largest value from a field? Is there a function such as max()/min() in Splunk, so that I can find the 3rd/Nth largest value from a field? For exa... by zztc2004 Explorer in Splunk Search 02-21-2018 0 3	0	3
ThruputProcessor: Do you require a chmod on the file to write the changes? I'm not able to edit this file due to permissions; anyone know if you require a chmod on the file to write the change... by shawno New Member in Splunk Search 02-21-2018 0 1	0	1
Adding splunk logback appender prevents application termination I have the following logback configuration and I am using it in a simple java application that does nothing but loggi... by arash_jalalian Explorer in Splunk Search 02-21-2018 1 9	1	9
question on eval and if in case of multiple validations ex: if value1=1 and value2=2 then i should be able to eval value3 based on a comparison condition ( i.e value3>90,te... by jiaqya Builder in Splunk Search 02-21-2018 0 3	0	3
Splunk changelog for modifications in rex command Hello, Is there a place, that ignore, where it is possible to read what has been changed between splunk releases for... by FloSwiip Path Finder in Splunk Search 02-21-2018 0 6	0	6
Why is the event break not working when there is a new line? Sample data: { "sensorName": "test1" } { "sensorName": "test2" } { "sensorName... by Mostlyqueries Explorer in Splunk Search 02-21-2018 0 2	0	2
How to apply the condition in multivalue event? Splunk Experts, How to write the eval command to compare the Multivalue, Below is data, Servicename **St... by VsplunkV Explorer in Splunk Search 02-21-2018 0 4	0	4
Optimize query with multiple subsearches Hello, I have a query with multiple subsearches that is slower than I would like, so I am looking for ways to optimi... by ib_321 New Member in Splunk Search 02-21-2018 0 2	0	2
How to return a group by value with the highest number of items? How do I modify the following query to return the name of the FRUIT with the highest count: index="myindex" URI="myu... by jbrenner Path Finder in Splunk Search 02-21-2018 0 6	0	6
How can I get the lag TIME using JOIN or Lookup using a "greater than" condition? Hello, I am trying to calculate the lag TIME between producers and consumers on my kafka setup. I want two know how ... by arthurh Engager in Splunk Search 02-21-2018 0 0	0	0
rt_md realtime searches? Hello, does anyone what generates realtime searches whose search_id starts with "rt_md"? I rarely run real time sear... by arpit_arora Explorer in Splunk Search 02-21-2018 0 2	0	2
Can I merge few rows into 1 row depending on the value of a field? Hi, I have a lookup file and I am using below query to show results in statistics table in my dashboard which is wor... by surekhasplunk Communicator in Splunk Search 02-21-2018 0 2	0	2
How to make another field as date field instead of _time? I am doing a chart command on two fields as below index=main sourcetype=csv "Site "=* "Content "=* \| chart count( ... by vrmandadi Builder in Splunk Search 02-21-2018 0 2	0	2
Need help with splunk-launch.conf Hello fellow Splunkers! I'm SUPER NEW at using splunk and I have received the same error message. I was hoping this ... by DanKneeVee New Member in Splunk Search 02-21-2018 0 2	0	2
How to differentiate events with Field values and group them by a different field? Hello Everyone I have to differentiate few events with their field values. In my events I have a field called Event... by maria2691 Path Finder in Splunk Search 02-21-2018 0 5	0	5
How to calculate response time from logs? I want to calculate response time from my logs for all records and our application logs in below format, 19-02-2018 ... by ajaynaralikar New Member in Splunk Search 02-21-2018 0 4	0	4