Splunk Search

Community Activity

Automating 20 diffrent searches on a single .csv log file , and getting textual feedback from this searches added to report. I have 20 searches to be performed on a single .csv log file . Every search results a different feedback like "missin... by alfiyashaikh New Member in Splunk Search 12-05-2017 0 9	0	9
Splunk has built-in mbtiles server. Can this be used for mbtiles that we create ourselves? I noticed that our splunk installs have a $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles file. This makes me... by wegscd Contributor in Splunk Search 12-05-2017 2 4	2	4
How to format dynamic columns output after transpose? Hi All, We use transpose to display our result like below sample; item 2017/11/01 2017/11/02 2017.... a 10000... by bj6192 Explorer in Splunk Search 12-05-2017 0 3	0	3
foreach with Error in 'eval' command below my se index=test code IN (1,3) \| eval code1=1 \| eval close_1=10 \| eval close_2=5 \| eval code2=3 \| foreach c... by kennethyeung New Member in Splunk Search 12-05-2017 0 7	0	7
How do I escape the ' in Splunk search while running from command line? Here is my query... curl -ku "user:password" https://myserver.com:8089/services/search/jobs/export --data-urle... by chetanhonnavile Explorer in Splunk Search 12-05-2017 0 3	0	3
How to count good work quotas vs. bad work quotas? I am a Newb at Splunk, so please bear with me if this is straight forward or has been answered previously. I have su... by pvirnig New Member in Splunk Search 12-05-2017 0 4	0	4
How to build a timechart from a combined search I have two different sources, each with information related to one another. The first source has, as part of the file... by brajaram Communicator in Splunk Search 12-05-2017 0 2	0	2
How to find the related search of lookup file Hi, Below query is using the CSV, can I please know how the CSV file is being generated like whether is there any q... by kteng2024 Path Finder in Splunk Search 12-05-2017 0 4	0	4
How can I calculate application outages based on time? Hi Guys I am having problem calculating application outages. I am polling for application state and data looks like ... by nabeel652 Builder in Splunk Search 12-05-2017 0 4	0	4
How can I extract SOAP envelope from raw data using rex I would like to use a rex so I can pull the SOAP Envelope out of raw text and then send it to xmlprettyprint. Can any... by msmit205 New Member in Splunk Search 12-05-2017 0 3	0	3
Populating Timechart Single Values with Dashboard Base Search I have a dashboard with a base search, three Single Values use the base search, but will only populate using stats, I... by jasonhallDFIR New Member in Splunk Search 12-05-2017 0 2	0	2
Group results by rows and columns I need some help grouping and transposing some data. The search below gives me the data but now I want to group it a... by kent_farries Path Finder in Splunk Search 12-05-2017 0 4	0	4
Transaction duration with no results found, would like the dashboard panel to reflect 0 Hi, I have this query index=wholesale_app buildTarget=blah product=product1 analyticType=checkpoint \|transactio... by dbcase Motivator in Splunk Search 12-05-2017 0 4	0	4
Calculating percentiles and including "missing" data I have a set of events that look something like the following: Machine: A, File: Foo, SizeMB: 10 Machine: A, File: ... by doweaver Path Finder in Splunk Search 12-05-2017 0 17	0	17
Predict values by end of current month Hi, I am trying to predict earnings by end of month (our KPI) based on historical data. I tried this event=Payment \| ... by rvencu Path Finder in Splunk Search 12-05-2017 0 9	0	9
if count of rows equal to 3 show only head 1 else show all rows How to write a simple query at the end of my search query to populate table of my dashboard saying : If count of rows... by surekhasplunk Communicator in Splunk Search 12-05-2017 0 3	0	3
Sum if formula for daily, hourly, and monthly rates I have some financial data in three separate fields for daily, hourly & monthly rates. The monthly field always take... by jackreeves Explorer in Splunk Search 12-05-2017 0 5	0	5
[Search] Avg failed logins by user per day sourcetype=linux_secure \|rex "\w{3}\s\d{1,2}\s\d{2}:\d{2}:\d{2}\s\S+\s(?<session>gdm-\w+)\S:\s"\| search session=gdm-p... by test_qweqwe Builder in Splunk Search 12-05-2017 0 1	0	1
Using the results from one search as a field to use in another search Hello all, I am trying to combine two different searches to correlate with one another. The first search is: Event... by DeanDeleon0 Path Finder in Splunk Search 12-05-2017 0 11	0	11
sort first 5 rows alphabetically then get total count then next 6 rows alphabetically and get the total i have 11 rows as output of my search query.Which looks like below Example field1 field2 co 10 im... by surekhasplunk Communicator in Splunk Search 12-05-2017 0 10	0	10
Regex crash course? Can anyone recommend a good regex crash course article so I can learn how to write my (simple) whitelists and blackli... by Joffer Path Finder in Splunk Search 12-05-2017 1 9	1	9
Creating a SubHeading in Splunk Hi, How do I go about creating a subheading in splunk. My table is in the following format: Date1 ... by mahbs Path Finder in Splunk Search 12-05-2017 0 6	0	6
Search query to get amount of compressed data hitting in the Indexer. Hello, Is there any serach query that return amount of compressed data hitting to the indexer before it get uncompre... by ansif Motivator in Splunk Search 12-05-2017 2 3	2	3
Help! How to create a drilldown table. Hi All, Could you help me on creating a drilldown table that will list all the ticket number based on the value of t... by NicoloPunzalan2 Engager in Splunk Search 12-05-2017 0 1	0	1
How to send events in JSON format to NullQueue? Hello, We are puling JSON data from cloud, can I trim out the events with EventId=5156 and 5158 from the events with... by kiran331 Builder in Splunk Search 12-04-2017 0 5	0	5