Splunk Search

Community Activity

Align the first column of the table Hi Team, I have a table in the dashboard, wherein i want first column to be left aligned and rest all the columns to... by ashish9433 Communicator in Splunk Search 11-25-2017 0 4	0	4
Rex to optionally extract several fields I have the need to extract fields between single quotes ( '192.168.0.1', '192.168.0.2') in a field that may contain s... by christoffertoft Communicator in Splunk Search 11-24-2017 0 6	0	6
Displaying Search peer Hi Splunkers , In my environment , I have three indexers and two search head in which one is master license server. ... by kannu Communicator in Splunk Search 11-24-2017 0 2	0	2
Why does the Splunk Java SDK always return 500k results, but I get 800k results in Splunk Web? The job returns 800k results in Splunk Web, whereas the Java API always returns 500k. by DataWarehousing Explorer in Splunk Search 11-24-2017 1 7	1	7
Need help with a complicated field-extraction via regex want to extract a field in splunk however Splunk Regex won't work so I am writing my own Regex. However I am struggli... by AnujaJadhav2 Explorer in Splunk Search 11-24-2017 0 4	0	4
How to distribute an event among many time buckets taking into account the duration of the event? I have a group of entries that has start_time, end_time , duration and name. Some of them are concurrent some of the... by nadid Path Finder in Splunk Search 11-24-2017 1 10	1	10
Dashboard Title - Display date as DD/MM/YYYY Hello there, idk how to display the date in the title of the dashboard format as DD/MM/YYYY, not in epoch format H... by marziaolla Path Finder in Splunk Search 11-23-2017 0 3	0	3
Chart Help index="all_eqt" \| stats sum(TotalSquareYards) as TSY by ShopOrder DefectDescription\| table ShopOrder DefectDescriptio... by Hppjet Path Finder in Splunk Search 11-23-2017 0 5	0	5
Bar chart with single bar does not display We have horizontal bar charts on our dashboards and when SPL is filtered down to single bar the bar is not displayed.... by simpkins1958 Contributor in Splunk Search 11-23-2017 0 5	0	5
Writing reqular expressions Please help me in writing the regular expression for the below: 2017-11-17 14:20:03 DueDate="11/17/2017", Identifier... by Deepz2612 Explorer in Splunk Search 11-23-2017 0 2	0	2
When should I use search_optimization? I don't understand when "search_optimization" will be used. And like below situation, there is the scene that search ... by yutaka1005 Builder in Splunk Search 11-23-2017 0 3	0	3
How to use timebased lookup table? I defined a lookup table as timebased config in transforms.conf as below [swipeR.csv] batch_index_query = 0 case_se... by samlinsongguo Communicator in Splunk Search 11-23-2017 0 2	0	2
How to timechart requests count with SLA and latency How to timechart requests count with SLA and latency based on the time mentioned in the logs. I need to know how many... by panandshah New Member in Splunk Search 11-23-2017 0 1	0	1
how to add more than one matching criteria while getting the count Hi @somesoni2 Can you help me with a simple search i have following requirement from a single input lookup file. No... by surekhasplunk Communicator in Splunk Search 11-23-2017 0 11	0	11
Error in multiselect - Could not create search Below is the code for multiselect which gets populated dynamically based on user selection. The Search query seems to... by sangs8788 Communicator in Splunk Search 11-23-2017 0 8	0	8
Can a Splunk search call a Python script to perform data manipulation? Hello, Before I waste too much time trying to get this to work, I'd like to know whether a Splunk search can call a ... by andrewtrobec Motivator in Splunk Search 11-23-2017 1 6	1	6
Why am I getting errors writing a query after installing Splunk DB Connect and connecting to Oracle database? Hello, I have installed splunk db connnect app and connecting to oracle database i am trying to write query select ... by gajananh999 Contributor in Splunk Search 11-23-2017 1 5	1	5
custom span in timechart Hi there, I have a set of events say 8 records. One record of particular date and other 7 records of past 7 days. whe... by dsiob Communicator in Splunk Search 11-23-2017 0 8	0	8
Is there a way of ensuring every event has a specific field? Hi guys, My goal is to use the map command look over all ip addresses and mac addresses that have had the value poli... by Robbie1194 Communicator in Splunk Search 11-23-2017 0 12	0	12
timechart - how do I combine these two charts into one? I have the following query: ... \| timechart avg(Latency) Can I combine this with: ... \| timechart count by respon... by zzztimbo Engager in Splunk Search 11-22-2017 2 4	2	4
CPU Utilization Query I am using this query to Fetch CPU Utilization details index=os sourcetype="cpu" \| multikv forceheader=1 \| eval huma... by kuldeepsingh99 New Member in Splunk Search 11-22-2017 0 2	0	2
Prevent Wildcard In User Input Hi everyone, I've developed a dashboard with text input for my user. However, I do not want my users to use wildcard... by JohannLiebert92 Path Finder in Splunk Search 11-22-2017 0 5	0	5
Search to identify missing data between 2 sets of data Looking for an SPL way to identify missing data between 2 sets of data. To simplify the problem, I will present it t... by collumc New Member in Splunk Search 11-22-2017 0 3	0	3
Event breaking not working on Tomcat Catalina data I have some Tomcat Catalina data and I can't for the life of me figure out why it isn't line breaking properly. There... by cpetterborg SplunkTrust in Splunk Search 11-22-2017 0 2	0	2
Is it possible to override the earliest and latest time in subsearch ? Hi, I am using sub search in my dashboard. Sub search use time defiend in main search query, however I want to use ... by AKG1_old1 Builder in Splunk Search 11-22-2017 1 4	1	4