Splunk Search

Community Activity

	How to apply the condition in multivalue event? Splunk Experts, How to write the eval command to compare the Multivalue, Below is data, Servicename **St... by VsplunkV Explorer in Splunk Search 02-21-2018 0 4	0	4
	Optimize query with multiple subsearches Hello, I have a query with multiple subsearches that is slower than I would like, so I am looking for ways to optimi... by ib_321 New Member in Splunk Search 02-21-2018 0 2	0	2
	How to return a group by value with the highest number of items? How do I modify the following query to return the name of the FRUIT with the highest count: index="myindex" URI="myu... by jbrenner Path Finder in Splunk Search 02-21-2018 0 6	0	6
	How can I get the lag TIME using JOIN or Lookup using a "greater than" condition? Hello, I am trying to calculate the lag TIME between producers and consumers on my kafka setup. I want two know how ... by arthurh Engager in Splunk Search 02-21-2018 0 0	0	0
	rt_md realtime searches? Hello, does anyone what generates realtime searches whose search_id starts with "rt_md"? I rarely run real time sear... by arpit_arora Explorer in Splunk Search 02-21-2018 0 2	0	2
	Can I merge few rows into 1 row depending on the value of a field? Hi, I have a lookup file and I am using below query to show results in statistics table in my dashboard which is wor... by surekhasplunk Communicator in Splunk Search 02-21-2018 0 2	0	2
	How to make another field as date field instead of _time? I am doing a chart command on two fields as below index=main sourcetype=csv "Site "=* "Content "=* \| chart count( ... by vrmandadi Builder in Splunk Search 02-21-2018 0 2	0	2
	Need help with splunk-launch.conf Hello fellow Splunkers! I'm SUPER NEW at using splunk and I have received the same error message. I was hoping this ... by DanKneeVee New Member in Splunk Search 02-21-2018 0 2	0	2
	How to differentiate events with Field values and group them by a different field? Hello Everyone I have to differentiate few events with their field values. In my events I have a field called Event... by maria2691 Path Finder in Splunk Search 02-21-2018 0 5	0	5
	How to calculate response time from logs? I want to calculate response time from my logs for all records and our application logs in below format, 19-02-2018 ... by ajaynaralikar New Member in Splunk Search 02-21-2018 0 4	0	4
	How to create Splunk Regex to search for a field after n occurrences of comma? I have been trying to create Splunk rex but it doesn't work for some reason and would need help in finding any word o... by atulitm Path Finder in Splunk Search 02-21-2018 0 7	0	7
	Stats Count in InputLookup? Hello, I am working on a dashboard panel and I am at my wits end on how I can create a table entry for the eventcoun... by zward Path Finder in Splunk Search 02-21-2018 0 1	0	1
	How to calcaulate a percentage based on the number of days, which are over 2 days old? I have a bunch of values for number of days but I want to write a query that shows the percentage of results that are... by Sfry1981 Communicator in Splunk Search 02-21-2018 0 3	0	3
	Put fields results under other fields Hi, I have my query that return a table with 4 fields: A1, B1, A2, A2. I want to create a new table that contains 2 ... by matansocher Contributor in Splunk Search 02-21-2018 0 2	0	2
	How to get the differece between each events using streamstats? I want to get the difference the events. Please find the below. Eg: Field1 Field2 Field3 Diff ABC 200... by Rajkumarkbm Engager in Splunk Search 02-21-2018 0 1	0	1
	regex - remove comma from the result Hello all, I have a problem extracting field using regex. The nearest query I've made is: index=* \| rex field=_raw ... by krusovice Path Finder in Splunk Search 02-20-2018 0 2	0	2
	In a stats based on the item selected in the drop down, how can I display two columns in the panel which display the count when Id=* and when Id=number? Hi, I have a query which does the stats count by ID selected through the drop-down query looks like : index=servers... by macadminrohit Contributor in Splunk Search 02-20-2018 0 2	0	2
	How can I create this Splunk Query for a specific domain an display the list of the traffic going to that domain address as a table? I have been out of date with building Splunk queries and I would need your help. 1) For a specific domain, let's say ... by ashishlal82 Explorer in Splunk Search 02-20-2018 0 1	0	1
	What exactly does splunk.exe clean eventdata -f do? I get the it cleans out the eventdata, my question is where? Is this limited to the server the command was ran from? ... by cboillot Contributor in Splunk Search 02-20-2018 0 6	0	6
	How to run operations on values from a main search and sub search? I have a log file that shows the number of jobs that have been started by an application and the jobs that have been ... by kaphie2002 New Member in Splunk Search 02-20-2018 0 2	0	2
	How can I create a drill down to list the name ,using the date available from lookup.csv? i want to create a drill down to list the name ,using the date available in lookup.csv please answer, if there is an... by asmafirdous Engager in Splunk Search 02-20-2018 0 1	0	1
	Remove non alphanumeric in the datamodel Hi I have datamodel data like below. I have tried to remove all non alphanumeric. So i can put it on a new field in ... by robertlynch2020 Influencer in Splunk Search 02-20-2018 0 1	0	1
	How to pivot a search off a subsearch result? Since I couldn't find this anywhere, I'm making my own question and answer, to better help the "next guy" who has thi... by Michael Contributor in Splunk Search 02-20-2018 0 1	0	1
	How can I compare static time value in a lookup field with current system time +/- 5 m? I'm just learning splunk so sorry if this is a simple question. I have a lookup with a field that has static time va... by donrtowery New Member in Splunk Search 02-20-2018 0 3	0	3
	How to eliminate identical values of two similar fields? Suppose I have a field called TESTS which contains some values. This field changes every day (each day is represented... by vshakur Path Finder in Splunk Search 02-20-2018 0 2	0	2

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Splunk Search

How to apply the condition in multivalue event?

Optimize query with multiple subsearches

How to return a group by value with the highest number of items?

How can I get the lag TIME using JOIN or Lookup using a "greater than" condition?

rt_md realtime searches?

Can I merge few rows into 1 row depending on the value of a field?

How to make another field as date field instead of _time?

Need help with splunk-launch.conf

How to differentiate events with Field values and group them by a different field?

How to calculate response time from logs?

How to create Splunk Regex to search for a field after n occurrences of comma?

Stats Count in InputLookup?

How to calcaulate a percentage based on the number of days, which are over 2 days old?

Put fields results under other fields

How to get the differece between each events using streamstats?

regex - remove comma from the result

In a stats based on the item selected in the drop down, how can I display two columns in the panel which display the count when Id=* and when Id=number?

How can I create this Splunk Query for a specific domain an display the list of the traffic going to that domain address as a table?

What exactly does splunk.exe clean eventdata -f do?

How to run operations on values from a main search and sub search?

How can I create a drill down to list the name ,using the date available from lookup.csv?

Remove non alphanumeric in the datamodel

How to pivot a search off a subsearch result?

How can I compare static time value in a lookup field with current system time +/- 5 m?

How to eliminate identical values of two similar fields?

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation