Splunk Search

Community Activity

	Updating App Macros Hi Community People.Our team has stood up a new instance of Splunk, and we have deployed out some cool new apps. One ... by JohnEGones Communicator in Splunk Search 01-15-2024 0 1	0	1
	How to use Not Exists function in Splunk when 2 indexes are involved ? Hi Can someone help to explain how we can use Not-exists in Splunk. Example is attached below for which i need to use... by Real_captain Path Finder in Splunk Search 01-15-2024 0 8	0	8
	Interpretation of integers I am wondering why the two following requests, when applied to exactly the same time range, return a different value:... by fabienpe Explorer in Splunk Search 01-15-2024 0 8	0	8
	Reordering fields Hello Splunkers,I've a Region filter over the dashboard. This Region filter has values AMER and EMEA. I've a requirem... by mnj1809 Path Finder in Splunk Search 01-15-2024 0 3	0	3
	To extract a field using the REX Command HelloI want to extract the field issrDsclsrReqId" using the Rex command. Can someone please help me with the command ... by Real_captain Path Finder in Splunk Search 01-15-2024 0 6	0	6
	Report NOT running 1 week I have this query in my report scuedhled to run every week, but results are for all time, how can i fix ?index=dlp us... by dm2 Explorer in Splunk Search 01-14-2024 0 1	0	1
	IndexScopedSearch The search failed. More than 1000000 events were found I read many articles about it but no one knows how to fix it. so how can I fix it? Error in 'IndexScopedSearch': The ... by abedcx Explorer in Splunk Search 01-13-2024 0 4	0	4
	Help with Outbound SMB traffic Rule SPL, please. Thank you! Can someone please help me with this rule? I have been assigned to create a bunch of similar rules but I am strugglin... by GIA Path Finder in Splunk Search 01-12-2024 0 2	0	2
	Fix Error: IndexScopedSearch? Hello Splunk enjoyers!I loaded some data(10 000 000), with fields: updated_time, info, user and discription, to my n... by splunk_enjoyer Explorer in Splunk Search 01-12-2024 0 2	0	2
	How to monitor a certain rule from McAfee? Hi!  I want to write a query that will show me all the events that jumped because of a certain rule that I set in Mc... by meitarsaban03 Loves-to-Learn in Splunk Search 01-12-2024 0 1	0	1
	Need an help to create a SPL's. Hi,Could any one pls figure out from these below logs to achieve the use case like when we launch rdp,proxy from secr... by Raj Builder in Splunk Search 01-12-2024 0 1	0	1
	Checking specific index data for large server list Hi all,I have list of 3k+ servers for which i want to check data flow from specific index. How can i do this with opt... by nehamvinchankar Path Finder in Splunk Search 01-12-2024 0 3	0	3
	Calculate Percentage of status code for 200 by _time I want to calculate the Percentage of status code for 200 out of Total counts of Status code by time. I have written ... by Chirag812 Explorer in Splunk Search 01-11-2024 0 2	0	2
	How to create summary index? I have a dashboard which contains 5 panels in table format.Query for panel1:index=xxxx sourcetype=xxxxx stroage_name... by Vani_26 Path Finder in Splunk Search 01-11-2024 0 5	0	5
	best/fastest way to match results from two sets of data in the same index I have an index that is receiving JSON data from a HEC, but with 2 different data sets and about 2M per day:DS1{guid:... by loganramirez Path Finder in Splunk Search 01-11-2024 0 8	0	8
	Return on certain field values in my search Hi Community,I'm fairly inexperienced when it comes to anything other than quite basic searches, so my apologies in a... by Clancy_Moped Engager in Splunk Search 01-11-2024 0 2	0	2
	information about Splunk audit events Hi at all,I need to create some Correlation Searches on Splunk audit events, but I didn't find any documentation abou... by gcusello SplunkTrust in Splunk Search 01-11-2024 0 2	0	2
	How to extract Title from this XML data HelloI have a very long xml record that I am trying to spath some data from but I cant seem to get it to work. Can so... by tkwaller1 Path Finder in Splunk Search 01-11-2024 0 5	0	5
	Possibility to extend the hover description Hello everyone, I am still relatively new to Splunk. I would like to add an additionalTooltipField to my maps visuali... by sha Loves-to-Learn in Splunk Search 01-11-2024 0 0	0	0
	Output of one String as an input to another search I have this query which is working as expected. There are two different body axs_event_txn_visa_req_parsedbody and ax... by jayeshrajvir Explorer in Splunk Search 01-11-2024 0 10	0	10
	Performing Set operation using splunk query Hi ,I have two queries, that have a common field someFieldone helps me find inconsistencies:sourcetype="my_source" so... by darkhorse91 Loves-to-Learn in Splunk Search 01-10-2024 0 1	0	1
	Splunk lookup (not inputlookup) and cidr matching Hello,I have a search that's coming back with 'src' which is the source IP of a client, and I have a lookup file cal... by cybersecnutant Explorer in Splunk Search 01-10-2024 0 2	0	2
	How Can I search retrospectively in splunk I am working on building a query to search retrospectively and potentially run a report.Let's say the first search is... by darkhorse91 Loves-to-Learn in Splunk Search 01-10-2024 0 3	0	3
	metrics-toolkit We are using splunk metrics-toolkit app to check the logs.created two indexes 1.metrics 2. platform_benefits and one ... by arun_questions New Member in Splunk Search 01-10-2024 0 1	0	1
	Query should return last/latest available data when there is no data for the selected time range Query should return last/latest available data when there is no data for the selected time range by saichandjawari Explorer in Splunk Search 01-10-2024 0 5	0	5