Splunk Search

Community Activity

	how to join 2 lookup files to combine all the rows. how to join 2 lookup files to combine all the rows. I used this query but not giving proper values and used join/appe... by Anud Path Finder in Splunk Search 11-09-2023 0 7	0	7
	Splunk Search results limit 4999 Hello, Currently, I am using the append command to combine two queries and tabulate the results, but I see only 4999 ... by kc_prane Communicator in Splunk Search 11-09-2023 0 4	0	4
	search query Hi there:I have two events shown below:Event #1source=foo1eventid=abcdEvent #2source=foo2event_id=abcdI am trying to ... by djoobbani Path Finder in Splunk Search 11-09-2023 0 1	0	1
	Better PDF report visualization Hello, i am reaching out to ask if there is any way to make the chart that was generated with the scheduled PDF repor... by Abass42 Communicator in Splunk Search 11-09-2023 0 0	0	0
	grouping count by multiple field substrings Hi,We currently have events where identifying the app that makes the event depends multiple fields, as well as substr... by OrionCulver Explorer in Splunk Search 11-09-2023 0 5	0	5
	Automated lookup using KVstore lookup I have a KV store collection that is populated. I have a lookup definition pointing to the KV store. If you use the... by coreyCLI Communicator in Splunk Search 11-09-2023 0 6	0	6
	Encrypt the Source data Hi All, My requirement is source data records data need to be encrypted. What does process need to follow? Is there a... by vijreddy30 Loves-to-Learn Everything in Splunk Search 11-09-2023 0 3	0	3
	How to apply eval to fields with complex names? I am basically faced with this problem: \| makeresults count=3 \| streamstats count \| eval a.1 = case(count=1, 1, coun... by duesser Path Finder in Splunk Search 11-09-2023 0 1	0	1
	Trying to create a custom Field Extraction I am trying to write a regex to extract a field called "registrar" from some data like i have below. Can you please h... by scout29 Path Finder in Splunk Search 11-08-2023 0 4	0	4
	way to detect half-duplex connections Does anyone know a pattern for detecting half-duplex connections from server/laptop sources to server destinations? n... by virginiatech199 Explorer in Splunk Search 11-08-2023 0 1	0	1
	parse ps command I have events like this :11/06/2023 12:34:56 ip 1.2.3.4 This is record 1 of 5USER PID %CPU %MEM VSZ RSS TTY STAT STAR... by lorinj62 Engager in Splunk Search 11-08-2023 0 3	0	3
	splunk merge field values I have a field called environment which has values like dev,prod,uat,sit.Now I want to create a new_field which all t... by viku7474 Explorer in Splunk Search 11-08-2023 0 3	0	3
	Comparing every elements in a list with a table Hello! Could you advise, please, how can I compare results of 2 searches, which returns results in a different format... by oleg90 Explorer in Splunk Search 11-08-2023 0 6	0	6
	How to limit search results to * % of all results I've got a search query which outputs 175 rows. I want it to output only top 5%. The row count will change over time ... by kk2204 Explorer in Splunk Search 11-08-2023 0 6	0	6
	linux splunk Uf 9.1.1 deploy-poll issue After installing the latest UF 9.1.1 on a linux i tried to connect it to the deployment server./splunk set deploy-po... by henryfox Engager in Splunk Search 11-08-2023 0 0	0	0
	Calculate average, min, max time in ms based on string in event log I am a beginner in Splunk queries. I might would be asking for some simple query but I am not able to construct it af... by rajnsoni92 Explorer in Splunk Search 11-08-2023 0 2	0	2
	Where/Search clause does not work with lookup. I am having trouble comparing the columns age and expectedAge, where the column expectedAge is a result of a lookup ... by sherwin_r Explorer in Splunk Search 11-08-2023 0 3	0	3
	regex skipping items with square brackets My regular expression has been working fine.. but now theres data with "[]" and it is being skipped here is the reg... by sphiwee Contributor in Splunk Search 11-08-2023 0 1	0	1
	Create a dashboard with timepicker for a field with date/time Hi All,I have a search query that allows me to pull results from an index summary.One of the fields is a time/date fi... by ssaenger Communicator in Splunk Search 11-08-2023 0 14	0	14
	Panel loading without submit button Hello,I have below code for a dropdown menu and the problem is the moment i select any of the value from drop down de... by Satyapv Engager in Splunk Search 11-08-2023 0 3	0	3
	Why does this work: lookup, outputnew Apparently my Google-Fu isn't the best and I can't find an explanation. Can someone please enlighten me? I have a loo... by yoshileigh66 Explorer in Splunk Search 11-08-2023 0 3	0	3
	Correlating Data from 3 Indexes (Match Destination IP from Firewall & Resolve Hostnames using Symantec & Windows Logs) Hi All,I want to create an SPL query that first returns data by matching the destination IP address from Palo Alto lo... by neokevin Engager in Splunk Search 11-08-2023 0 3	0	3
	Saved search query got auto deleted Hi,I have 2 saved searches that fetch data from datamodel (pivot table) and the result of these savedsearch is storin... by Lavender Loves-to-Learn Everything in Splunk Search 11-07-2023 0 0	0	0
	subsearch query Can someone please help me with this.So I have the following query:source=abc type=Change msg=" consumed" event_type=... by djoobbani Path Finder in Splunk Search 11-07-2023 0 18	0	18
	"transaction" command: have four "startswith" and two "endswith" patterns for the same transaction I need to run a Splunk search with "transaction" command and I have four pattern variations for the start of the tran... by sp Loves-to-Learn in Splunk Search 11-07-2023 0 2	0	2