Splunk Search

Community Activity

	Alternative to streamstats+last I have this query, where I want to build a dataset from a variable and its 4 previous values. I can solve this like s... by duesser Path Finder in Splunk Search 11-28-2023 0 2	0	2
	having a doubt in splunk query I want to change the msg for a log i.e<list ><Header>.....</Header><status><Message>Thuihhh_4y3y27y234yy4 is pending<... by Chandrasekhar6 Explorer in Splunk Search 11-28-2023 0 2	0	2
	Is there a way to extract fields which is : separated John:x:/home/John:/bin/bash is there a way to extract the field from above with colon separated. We have many users... by Hema_Nithya Explorer in Splunk Search 11-28-2023 0 4	0	4
	field extraction for error message I want to extract the following information make it as a field as "error message" .index=os source="/var/log/syslog"... by Hema_Nithya Explorer in Splunk Search 11-27-2023 0 1	0	1
	AppInspect check_all_lookups_are_used too restrictive? Except from an AppInspect report: [ Failure Summary ] Failures will block the Cloud Vetting. They must be fixed. ch... by Graham_Hanningt Builder in Splunk Search 11-27-2023 0 6	0	6
	Why the top and appendcols giving different percentage results? Hi,Why the below two queries giving me different percentage values? I checked the total count and count for Action=Se... by abhi04 Communicator in Splunk Search 11-27-2023 0 4	0	4
	Splunk Python SDK - How to call my custom search command only once? Hi there, I'm developing a custom search command to call a custom rest endpoint using Splunk's Python SDK and the co... by bojanjanisch New Member in Splunk Search 11-27-2023 0 2	0	2
	How to put comment on the Splunk Dashboard Studio source? Hello,How to put comment on the Splunk Dashboard Studio source?The classic Splunk Dashboard I can put comment on the... by LearningGuy Motivator in Splunk Search 11-27-2023 0 4	0	4
	Locate latest record by some grouping field With a query like the following (I've simplified it a little here and renamed some fields)index="my-test-index" proje... by user-mcuserface Engager in Splunk Search 11-27-2023 0 4	0	4
	Splunk web proxy query Hey,Can someone please help me in building a query for user accessing webpage despite warning sign from proxy? @splun... by Raj7 New Member in Splunk Search 11-27-2023 0 3	0	3
	Index/Sourcetype inventory Hi Team,I am trying to create a search which show me the list of all sourcetype and index which are not in use or let... by cbiraris Path Finder in Splunk Search 11-27-2023 0 2	0	2
	Having trouble in applying regex to blacklist Windows events on a Universal Forwarder. Hi,Looking for some assistance with Regex to blacklist inputs.conf on Windows Systems. We modified inputs.conf loca... by smith_ Builder in Splunk Search 11-27-2023 0 40	0	40
	persoas coeficient correlation calculate manually hello , i have a problem i want to calculate a persoas coefficient to do correlation by the loop but i have a big iss... by LeRoiGanesh22 Loves-to-Learn in Splunk Search 11-27-2023 0 1	0	1
	Regex Hostname for multiple scenario Hi,I have log which the field name is called "name". The regex cannot get the hostname from the name field because ha... by Akmal57 Path Finder in Splunk Search 11-26-2023 0 1	0	1
	Multiple capture groups not capturing I have the following log structure: 2023-11-25T21:18:54.244444 [ info ] I am a log message request = GET /a... by arielbintang New Member in Splunk Search 11-26-2023 0 3	0	3
	Alien Vault Check OTX HelloI have installed the add-on "Alien Vault Check OTX".I would like to know if out of this command where I can quer... by splunkcol Builder in Splunk Search 11-25-2023 0 2	0	2
	Find the number of days between the earliest and latest event. I need help with an employee travel analysis report.I have an index containing information about employee office chec... by kimberlytrayson Path Finder in Splunk Search 11-25-2023 0 2	0	2
	Optimizing Splunk Search Query without Using Joins and Subquery due to Record Limitation Hello Community,I'm seeking some guidance with optimizing a Splunk search query that involves multiple table searche... by Arpit-Dwivedi New Member in Splunk Search 11-25-2023 0 1	0	1
	Compare 2 searches and Update Lookup Table and Rows Hi All,I am trying to do a search to compare 2 different sources. Firstly, I created a lookup to catch some rules hit... by onurragacc Loves-to-Learn Lots in Splunk Search 11-25-2023 0 1	0	1
	splunk wildcard search I am very new to SPLUNK and practicing using the botsv1 index.I need to use a "Wild Card" to find all the passwords u... by Mouseman123 Explorer in Splunk Search 11-24-2023 0 4	0	4
	not relevant by GIA Path Finder in Splunk Search 11-24-2023 0 1	0	1
	Rex extract not working Hi, I have my messages like belowmsg: abc.com - [2023-11-24T18:38:26.541235976Z] "GET /products/?brand=ggg&market=ca&... by Span Engager in Splunk Search 11-24-2023 0 1	0	1
	Users with the same roles, in the same app, and same search, are getting different results from AWS logs The search they are running is index=* cloudtrail<bucketnumber>* across a 7 day period.Environment Details: We are us... by sperkins Path Finder in Splunk Search 11-24-2023 0 0	0	0
	Extracting fields from logs where a particular field sometimes does not exist Hi all,looking for help with how I can extract all available fields in a set of logs where a particular field sometim... by neilsmith2 Explorer in Splunk Search 11-23-2023 0 2	0	2
	Categorize range of status values and calculate count We have range of statua from 200 to 600. Want to search logs and create a output in below sample for range as 200 to ... by Viveklearner Engager in Splunk Search 11-22-2023 0 3	0	3