Splunk Search

Community Activity

	Query including multiple CSV and Rex Hello everyone, it's been a long long time that I've not used splunk. I would need some help to do a query or two ple... by metalshad05 New Member in Splunk Search 08-09-2017 0 8	0	8
	Filter by URL How do we filter by URL? I use the search criteria below, however, I'm trying to figure out how will I filter the res... by roseb New Member in Splunk Search 08-09-2017 0 3	0	3
	Floating column chart using simple xml Hi Experts I am trying to build floating bars in a column chart. The y axis is fixed from 0-24. I want to start the b... by vaibhavagg2006 Communicator in Splunk Search 08-08-2017 0 3	0	3
	Expanded stacked column chart Is it possible to create a column chart that is stacked, but where each part of the stack still occupies its own colu... by tmortiboy New Member in Splunk Search 08-08-2017 0 5	0	5
	Splunk ES detecting changes to OS auth files Hi All We have a request to generate a notable event in Splunk ES for any changes made in the linux OS to /etc/passwd... by proylea Contributor in Splunk Search 08-08-2017 0 2	0	2
	Tips on using sort and count: It is possible to generate a: "* \|stats values(y) count by x \| sort -x" but where each value of y is count separately and also sorted? I'm trying to generate a table where the output is something like this: ValueY ValueX Count ValueY1 Val... by agarza Explorer in Splunk Search 08-08-2017 0 4	0	4
	How to get earliest and latest time for the last one hour and compare it with the same hour last week? How to get earliest and latest time for the last one hour to compare with the same hour last week for which I don't k... by kumina New Member in Splunk Search 08-08-2017 0 5	0	5
	Map fields from two sourcetypes based on a certain time range Hello, A project I'm working on requires that I monitor who is logging into an application. As it is, the logs of t... by Svill321 Path Finder in Splunk Search 08-08-2017 0 5	0	5
	Regex formating help Can anyone help me format a regular expression for Splunk? I can create the regular expression using regexr.com and ... by AHEARNJ Explorer in Splunk Search 08-08-2017 0 2	0	2
	Streamstats count I want a cumulative count of a field that has multiple values. Somehow this isn't working: base search\| streamstats ... by pranaynanda Path Finder in Splunk Search 08-08-2017 0 9	0	9
	Separate values in stacked bars How can I still have a separation between 'xls' and 'xlsx' in the bar that says 'Excel'? eval ExtTyp = case(extensio... by pranaynanda Path Finder in Splunk Search 08-08-2017 0 2	0	2
	Real-time alert is skipped. Hello, I have the following message in the scheduler activity window on DMC, that states I have reached the limit of... by andrei1bc Communicator in Splunk Search 08-08-2017 0 1	0	1
	How to show the percentage of unique values Hi, I have a simple search that uses top to get the top 10 countries: search ........ \| top Country It will gi... by ewanbrown Path Finder in Splunk Search 08-08-2017 0 2	0	2
	How to display dates of month in columns Hi Team, I have a scenario to display dates of selected month in columns. For Example , if i select August month in ... by c_krishna_gutur Explorer in Splunk Search 08-08-2017 0 2	0	2
	Splunk Admin Role- unable to change app visibility. Hello community, I have splunk admin role on splunk GUI, I access Splunk from web which is hosted on remote machine... by ShashiAcn New Member in Splunk Search 08-08-2017 0 5	0	5
	KMZ file with markers on map - How can I add more details to the map? Hello, I am using a geospatial lookup with a kmz file, it works and shows the polygons on the map, but I need more d... by YoussefT New Member in Splunk Search 08-08-2017 0 3	0	3
	Find values that only match a specific list of values and nothing else I am working with an event log from an email system where all the different recipients of an email are being listed a... by JeffBothel Explorer in Splunk Search 08-08-2017 0 4	0	4
	How can I figure out why my lastlog directory is huge? Hi guys, Why is my lastlog directory so huge? -rw-r--r--. 1 root root 216G Aug 7 17:35 lastlog What can ... by wvalente Explorer in Splunk Search 08-08-2017 0 2	0	2
	Need to extract the store id, mop and amount from the event and restrict the amount to 2 decimal point 900 200 138 203.009999999999990905052982270717620849609375 MASTERCARD by yograjpatel New Member in Splunk Search 08-08-2017 0 6	0	6
	Put the time into a column instead of a row Hi everyone, I hope you can help. I have the following search: index=rb_idx_default_summary (report=EXCHANGE_Mai... by egreibl Engager in Splunk Search 08-07-2017 0 3	0	3
	Convert Multiple Values in single field to multiple fields I am needing some assistance with the following issue with a field with multiple Values. Since this is coming from a ... by matt4321 Explorer in Splunk Search 08-07-2017 0 7	0	7
	Left join not working properly in Splunk Enterprise 6.6.2 Hi, I have written a simple left join query which doesn't seem to work properly. Objective: To find out host which ... by kamal_jagga Contributor in Splunk Search 08-07-2017 0 3	0	3
	Chart one value field and multiple value field within same time bucket Hi, Thanks up front your time I have duration field generated from some transaction command and I would love to draw... by akocak Contributor in Splunk Search 08-07-2017 0 8	0	8
	Can I check that a transaction does not contain more than 1 arbitrary field? I have a log that tracks fruit names (Ok, not really, but let's go with that) over the course many log entries compr... by dreeck Path Finder in Splunk Search 08-07-2017 0 8	0	8
	Is there a way to send a single sourcetype to a heavy forwarder? Hi there, Is there a way to send specific sourcetype to a heavy forwarder? For example, I would like to send the "da... by kteng2024 Path Finder in Splunk Search 08-07-2017 0 1	0	1