Splunk Search

Community Activity

	Why the top and appendcols giving different percentage results? Hi,Why the below two queries giving me different percentage values? I checked the total count and count for Action=Se... by abhi04 Communicator in Splunk Search 11-27-2023 0 4	0	4
	Splunk Python SDK - How to call my custom search command only once? Hi there, I'm developing a custom search command to call a custom rest endpoint using Splunk's Python SDK and the co... by bojanjanisch New Member in Splunk Search 11-27-2023 0 2	0	2
	How to put comment on the Splunk Dashboard Studio source? Hello,How to put comment on the Splunk Dashboard Studio source?The classic Splunk Dashboard I can put comment on the... by LearningGuy Motivator in Splunk Search 11-27-2023 0 4	0	4
	Locate latest record by some grouping field With a query like the following (I've simplified it a little here and renamed some fields)index="my-test-index" proje... by user-mcuserface Engager in Splunk Search 11-27-2023 0 4	0	4
	Splunk web proxy query Hey,Can someone please help me in building a query for user accessing webpage despite warning sign from proxy? @splun... by Raj7 New Member in Splunk Search 11-27-2023 0 3	0	3
	Index/Sourcetype inventory Hi Team,I am trying to create a search which show me the list of all sourcetype and index which are not in use or let... by cbiraris Path Finder in Splunk Search 11-27-2023 0 2	0	2
	Having trouble in applying regex to blacklist Windows events on a Universal Forwarder. Hi,Looking for some assistance with Regex to blacklist inputs.conf on Windows Systems. We modified inputs.conf loca... by Raj Builder in Splunk Search 11-27-2023 0 40	0	40
	persoas coeficient correlation calculate manually hello , i have a problem i want to calculate a persoas coefficient to do correlation by the loop but i have a big iss... by LeRoiGanesh22 Loves-to-Learn in Splunk Search 11-27-2023 0 1	0	1
	Regex Hostname for multiple scenario Hi,I have log which the field name is called "name". The regex cannot get the hostname from the name field because ha... by Akmal57 Path Finder in Splunk Search 11-26-2023 0 1	0	1
	Multiple capture groups not capturing I have the following log structure: 2023-11-25T21:18:54.244444 [ info ] I am a log message request = GET /a... by arielbintang New Member in Splunk Search 11-26-2023 0 3	0	3
	Alien Vault Check OTX HelloI have installed the add-on "Alien Vault Check OTX".I would like to know if out of this command where I can quer... by splunkcol Builder in Splunk Search 11-25-2023 0 2	0	2
	Find the number of days between the earliest and latest event. I need help with an employee travel analysis report.I have an index containing information about employee office chec... by kimberlytrayson Path Finder in Splunk Search 11-25-2023 0 2	0	2
	Optimizing Splunk Search Query without Using Joins and Subquery due to Record Limitation Hello Community,I'm seeking some guidance with optimizing a Splunk search query that involves multiple table searche... by Arpit-Dwivedi New Member in Splunk Search 11-25-2023 0 1	0	1
	Compare 2 searches and Update Lookup Table and Rows Hi All,I am trying to do a search to compare 2 different sources. Firstly, I created a lookup to catch some rules hit... by onurragacc Loves-to-Learn Lots in Splunk Search 11-25-2023 0 1	0	1
	splunk wildcard search I am very new to SPLUNK and practicing using the botsv1 index.I need to use a "Wild Card" to find all the passwords u... by Mouseman123 Explorer in Splunk Search 11-24-2023 0 4	0	4
	not relevant by GIA Path Finder in Splunk Search 11-24-2023 0 1	0	1
	Rex extract not working Hi, I have my messages like belowmsg: abc.com - [2023-11-24T18:38:26.541235976Z] "GET /products/?brand=ggg&market=ca&... by Span Engager in Splunk Search 11-24-2023 0 1	0	1
	Users with the same roles, in the same app, and same search, are getting different results from AWS logs The search they are running is index=* cloudtrail<bucketnumber>* across a 7 day period.Environment Details: We are us... by sperkins Path Finder in Splunk Search 11-24-2023 0 0	0	0
	Extracting fields from logs where a particular field sometimes does not exist Hi all,looking for help with how I can extract all available fields in a set of logs where a particular field sometim... by neilsmith2 Explorer in Splunk Search 11-23-2023 0 2	0	2
	Categorize range of status values and calculate count We have range of statua from 200 to 600. Want to search logs and create a output in below sample for range as 200 to ... by Viveklearner Engager in Splunk Search 11-22-2023 0 3	0	3
	How to add a line break to the eval condition? I have an eval condition as below in my search: \| eval body= username. " user attempted to delete " . activity_count... by pavanae Builder in Splunk Search 11-22-2023 0 5	0	5
	inputlookup with fuzzy matching Hello,I'm building a query which matches entries in an inputlookup table against a set of log data. The original work... by warren Explorer in Splunk Search 11-22-2023 0 1	0	1
	Using the dedup command How do I count the number of unique recipients of each type of unique attachment from emails. The same user could rec... by Benny611 Engager in Splunk Search 11-22-2023 0 2	0	2
	How do you change a span of 1 week time to start from Saturday to friday? I have data and I need to visualize for a span of 1 week. I.e: it takes data from Sunday to Saturday. But, I want a ... by DataOrg Builder in Splunk Search 11-22-2023 0 6	0	6
	Can I use CIDR in the deployment server? Is is possible to specify a client group using a CIDR pattern to simplify app deployment to a network segment? by Lowell Super Champion in Splunk Search 11-22-2023 0 4	0	4