Splunk Search

Splunk Search
Community Activity
welcominh
Im having an issue when trying to dedup some values. Here are the logs of servers states im having in Splunk, from th...
by welcominh New Member in Splunk Search 07-26-2017
0 2
0
2
isitnikov
Hello, This seems to be like a very easy thing to do which I can't figure out. I have a csv file with ip addresses. ...
by isitnikov Engager in Splunk Search 07-25-2017
0 10
0
10
jayakanthprasad
Hi, I have few queries related to lookup in Splunk. My lookup file - list-of-master-ids.csv content of csv file ...
by jayakanthprasad New Member in Splunk Search 07-25-2017
0 5
0
5
nishantmishra21
Hi All, need some insight and help. I have a MQ like objects, information regarding which is forwarded into splunk a...
by nishantmishra21 Engager in Splunk Search 07-25-2017
0 4
0
4
katzr
I would like to delete a data field entirely from Splunk. Would I use the same way as described below? The data field...
by katzr Path Finder in Splunk Search 07-25-2017
0 2
0
2
avanaschen
I generate logline when starting processing 1 object and another logline when ready. How to find logline1 without a ...
by avanaschen New Member in Splunk Search 07-25-2017
0 4
0
4
splunk_95
Hi all, I am a very new splunk user and would like to conduct produce a table with of each unique ID and the corresp...
by splunk_95 Explorer in Splunk Search 07-25-2017
0 5
0
5
griffinpair
Example: source="D:\filepath\filepath\filepath\filepath\DebugImportHelper_7_25_2017.log" This log file is created e...
by griffinpair Path Finder in Splunk Search 07-25-2017
0 2
0
2
Splunker6789
We have list of hots not logging lookup hosts list can any one help with search to search in splunk find out why the...
by Splunker6789 Explorer in Splunk Search 07-25-2017
0 7
0
7
aniketb
Hi, I have a regex to extract a field. I need unique count of those. During exploring I found that the extracted fie...
by aniketb Path Finder in Splunk Search 07-25-2017
0 2
0
2
ellenbytech
I have a search index=safes TransactionCode=DOPN OR TransactionCode=DCLO Details="Door A Opened" OR Details="Door A ...
by ellenbytech Explorer in Splunk Search 07-25-2017
0 1
0
1
jbrenner
Hello, I have the following query which gives me the percentage of successful orders for the time period selected in...
by jbrenner Path Finder in Splunk Search 07-25-2017
0 12
0
12
barunbiswas
I have file processing events with 2 stages - X & Y. I want to get filenames which have gone through X but not Y. I a...
by barunbiswas New Member in Splunk Search 07-25-2017
0 1
0
1
GHOST27
Ex: | where first_seen<"24h" or where first_seen="-1d" this is what I used but obviously it's wrong.
by GHOST27 Engager in Splunk Search 07-25-2017
0 2
0
2
bapruski
I am working on a query to extract all successful authentications (events 4624, 4768 and 4769) per user per day. The ...
by bapruski Explorer in Splunk Search 07-25-2017
0 3
0
3
kteng2024
index=abc source=license_usage.log type=usage | rex field=h "(ab2)(?P\w+[^\d+])" |search Group=kb01m OR Group=kb02r ...
by kteng2024 Path Finder in Splunk Search 07-25-2017
0 4
0
4
manderson7
I've been banging my head against the wall trying to get this to work, and not succeeding, obviously. I have a 217 li...
by manderson7 Contributor in Splunk Search 07-25-2017
0 2
0
2
mdsnmss
I have a user who is receiving the error: No matching fields exist [subsearch]: The lookup table <-lookup>.csv is i...
by SplunkTrust SplunkTrust in Splunk Search 07-25-2017
0 3
0
3
Kieffer87
We've recently run into some users that have run searches which resulted in Splunk Indexers crashing. I'm looking for...
by Kieffer87 Communicator in Splunk Search 07-25-2017
0 4
0
4
mdwasimkhan
Hi All, I am looking for a query which will accept multiple value subsearch output as a input of main serach, See be...
by mdwasimkhan Engager in Splunk Search 07-25-2017
0 5
0
5
dahada2010
Data received from universal forwarder is displaying as below. Please advise how to get it as normal text. --splunk-...
by dahada2010 New Member in Splunk Search 07-25-2017
0 5
0
5
wvalente
Hi, I want to run a search that alert me when a user is created and deleted in a period of time between 72 hours and...
by wvalente Explorer in Splunk Search 07-25-2017
0 2
0
2
davidda
Hi, I want to create a new field named "RequestId" from the data after "channelRequestId:" field using regex. This i...
by davidda Explorer in Splunk Search 07-25-2017
1 2
1
2
manjuase
I have a lookup with the details of server and I want to check whether that servers are up or not. if not i have to ...
by manjuase Explorer in Splunk Search 07-25-2017
1 5
1
5
oolongcat
Hi Splunk support, I have a set of log file which name as below: (today is 20170723) application_20170721.log appli...
by oolongcat New Member in Splunk Search 07-25-2017
0 3
0
3
Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...