Splunk Search

Community Activity

compare response time from yesterday to today Trying to compare response time from yesterday to today. This search seems to be working, but very, very slow. Any ... by mightaswelby Explorer in Splunk Search 10-13-2017 0 4	0	4
Help writing a search to count by event type? eventtype=* \|stats count by eventtype which works. However, in a dashboard below query doesn't work. Any suggestions... by archananaveen Explorer in Splunk Search 10-13-2017 0 2	0	2
Regex to find Account_Name's that end in a $ and \ isn't stopping it's special char nature I want to find all names in Account_Name that end with a $ and not ones that don't. IE: I want NAME1$ but not NAME2. ... by benbabich Explorer in Splunk Search 10-13-2017 0 4	0	4
Predict by My search result: _time Location Total 01/01/13 12:00:00.000 AM Location 1 12 02/01/13 ... by Parameshwara Path Finder in Splunk Search 10-13-2017 0 5	0	5
How to not evaluate something during a certain time period? So, I have a search query that calculates a field but I wanted to know if there is a way to check if it is a certain ... by kdimaria Communicator in Splunk Search 10-13-2017 0 1	0	1
How to extract the fields from JSON output and display as table {<!-- --> "ERROR_CODE" : "XXX-XXX-00000", "ERROR_DESC" : "Success." }, "accountBalances" : {<!-- --> "accountNumber13... by yograjpatel New Member in Splunk Search 10-13-2017 0 7	0	7
Help needed in extracting string between two similar strings I have a log mentioned below: ERROR: Cannot retrieve requested details in 103 ms cause: [50000] ERROR: Building prof... by Nadal7noval New Member in Splunk Search 10-13-2017 0 2	0	2
Count combination of multivalue field Hi, I wonder whether someone can help me please. I'm using the query below to extract the different actions performe... by IRHM73 Motivator in Splunk Search 10-13-2017 0 2	0	2
i want to show two decimals after integer without changing values and if we give integer(52) also then output like 52.00 HI, a=0.54689556898 b=1.25698 c=0.5 d=51 I want output like a=0.54 b=1.25 c=0.50 d=51.00 Please do needful, how t... by venu08673 New Member in Splunk Search 10-13-2017 0 4	0	4
why i am finding count difference in timechart function Hi, When i run a search for 7 days , i am getting correct count for all 7 days .But when i run for 30 days then i am... by umsundar2015 Path Finder in Splunk Search 10-13-2017 0 6	0	6
How to calculate response time for this particular event ? How to calculate response time for this particular event ? I used to transaction command to club the data for same t... by karthi2809 Builder in Splunk Search 10-13-2017 0 1	0	1
How to figure out which lookup .csv file a certain index is using? In Splunk, how do I figure out which lookup .csv file a certain index is using? In other words, how to find which ind... by chow11 New Member in Splunk Search 10-13-2017 0 8	0	8
Which regex code will help pull out the xml fields? Everything repeats from VULN to VULN It is necessary to pull out the Number of VULN, severity, cveid, CVSS_BASE, CON... by sphc Explorer in Splunk Search 10-13-2017 0 3	0	3
Timechart and overlay two columns? I have a field outcomeIndicator in my data, that holds values 0,1,5,8. 0 and 1 mean a success of the event, and 5 an... by snipedown21 Path Finder in Splunk Search 10-13-2017 0 2	0	2
How can I use tstats to search event count comparing with last week a the same time I have a search that works with stats - but fail to work when using tstats.. Here is the search with stats: index=w... by splunk_pn Explorer in Splunk Search 10-12-2017 1 2	1	2
How to extract the numeric value and IP address from a string in my sample data? hello, My log contains below entries. 2017-10-06T04:19:25.658+0000 I NETWORK [initandlisten] connection accepted f... by chandukreddi Path Finder in Splunk Search 10-12-2017 1 15	1	15
How do I break into multiple events just by space? I want the one event in the picture to be broken into many events with the spaces in between. How do I do so with pro... by Kitteh Path Finder in Splunk Search 10-12-2017 0 7	0	7
How do you write a search for an incremental count for a field evaluating success vs. failure? My output is Success Success Success Failure Failure Faliure Success Success Success Failure Success Success Succes... by karthikeyan_k14 New Member in Splunk Search 10-12-2017 0 1	0	1
How to subset top N records from the number generated from eventstats Hi Splunk friends, I am new to Splunk community and currently facing a question. I have below table which was gene... by zztc2004 Explorer in Splunk Search 10-12-2017 0 6	0	6
Using regex to extract a string where the following string may or may not exist Hi, I am trying to extract some fields which are generally bound by other strings (eg Some Text 1 Some Text 2). I h... by rhysjones Path Finder in Splunk Search 10-12-2017 0 13	0	13
Extract string and place in new field Trying to extract a string into a new field. A sample of log is as follows: productName = Special Day Argyle Socks f... by sogeniusio Path Finder in Splunk Search 10-12-2017 0 3	0	3
How to convert Week of Year number to a standard Date format? Hi, I have a set of data where the date is stored as Year/Week of Year. For example: this week would be 14/43 while... by mrfredman Path Finder in Splunk Search 10-12-2017 0 6	0	6
How much data is indexed over 12 months Hello, I'm looking for a report that shows the currenct size of my Splunk Indexer and how much of that data is over 1... by fmpa_isaac Path Finder in Splunk Search 10-12-2017 0 2	0	2
Sum and average of values present in two columns of an output Hi All, I would like to get the average for Failed_Attempts and Passed_Authentications of the below table, _time ... by yashwanth_g_pra Observer in Splunk Search 10-12-2017 0 2	0	2
unable to start the splunk on my mac os High Sierra system I install the splunk to my mac for several times, but I still cannot be able to start it. Here is screenshoot when I... by jasonq551 Engager in Splunk Search 10-12-2017 0 2	0	2